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NOTICE 


The Drug Enforcement Administration (DEA) and another government 
entity determined that portions of this report constitute Law Enforcement 
Sensitive (LES) information. Those portions have been redacted to enable 
the issuance of this public version of the report. Issuance of this report 
follows efforts by the Office of the Inspector General (OIG), the DEA f and 
the other government entity to agree on the scope of the redactions. The 
OIG continues to believe that some redacted material is not LES, but defers 
to the judgment of DEA and the other government entity. This public 
version of the report contains an Executive Summary without any 
redactions. 

Consistent with the OIG's ordinary practice, the full f, unredacted report has 
been produced to the DEA, the Department of Justice, and to relevant 
congressional oversight committees. 





Executive Summary 


A Review of the Drug Enforcement Administration's Use of Administrative 
Subpoenas to Collect or Exploit Bulk Data 


The Department of Justice Office of the Inspector 
General (OIG) conducted a review of the Drug 
Enforcement Administration's (DEA) use of its 
administrative subpoena authority under 21 U.S.C. § 
876(a) to collect or exploit "bulk data." 1 Section 
876(a) authorizes the DEA to issue administrative 
subpoenas, without court or other approval outside the 
agency, requiring the production of records that are 
"relevant or material" to certain drug investigations. 21 
U.S.C. § 876(a). 

For purposes of this review, we relied on the 
Department of Justice's (Department or DOJ) definition 
of a "bulk collection" of data as a collection of a 
significant amount of data that is unrelated to an 
individual, group, or entity that is a target of an 
investigation, where the data is acquired or updated 
periodically on an ongoing basis. Typically, a "bulk 
collection" of data captures records relating to broad 
categories of transactions, such as the non-content 
records of all telephone calls handled by a particular 
telecommunications service provider. Collections of 
bulk data may include millions or even billions of data 
points and are often loaded into computers and 
analyzed by means of automated searches. The 
relevance of any individual record within the large-scale 
collection (such as a record of a single phone call) to a 
specific open investigation is typically not determined 
until after the bulk collection is acquired and queried. 

The Programs 

Our report addresses three programs in which the DEA 
has used its administrative subpoena authority to 
collect or exploit bulk data in recent years. The DEA 
has identified all of the programs discussed in this 
report as Law Enforcement Sensitive. Accordingly, we 
have removed program names and some operational 
details about the programs to enable issuance of this 
public Executive Summary. 


Program A: Program A is a federal interagency data 
analysis program spearheaded by the DEA, but initiated 
with the approval of DOJ leadership. From the 1990s 
until mid-2013, as part of Program A, the DEA issued 
"non-target-specific" subpoenas to multiple 
telecommunications service providers to amass an 
extremely large collection of bulk telephone call records 
("Collection 1"). The Collection 1 subpoenas were "non¬ 
target-specific" in that they were not directed at or 
related to particular identifiable investigations or 
targets. Rather, the Collection 1 subpoenas required 
the production of records for all calls made from the 
United States over a recipient company's 
telecommunications network to countries that the DEA 
determined had a "nexus to drugs." The call records 
that were collected, also known as "telephone 
metadata," included the originating and receiving 
telephone numbers and the date, time, and duration of 
the call, but did not include the content of any calls or 
subscriber information. 

Under Program A, the DEA used Collection 1 data 
together with other data to create analytic products for 
investigations. Investigators from the DEA or other 
participating federal agencies contacted a Program A 
Staff Coordinator and provided relevant facts regarding 
the connection between a target telephone number and 
an active case. The Staff Coordinator reviewed the 
request to determine if it contained a sufficient basis 
connecting the target number with an active case, 
referred to as "reasonable articulable suspicion" (RAS). 
Once the request was approved, the DEA created 
Program A investigative products by using the target 
number to query the Collection 1 dataset and other 
records in order to identify calls made to or from that 
target number and in some cases a more in-depth 
analysis of a target's telephone contacts to identify 
relevant investigative links. The resulting analytical 
products were sent back to the requesting office for use 
in investigations. 


1 Department of Justice Inspector General Michael E. Horowitz recused 
himself from this review because he occupied senior management 
positions within the Criminal Division from 1999 through 2002, a time 
period during which DEA operated, with Criminal Division involvement, 
one of the programs examined herein. We did not interview Mr. 
Horowitz or review his conduct because of the inherent conflict for this 


office to evaluate the role of the Inspector General. Although auditing 
standards are not applicable to this review, which is not an audit, they 
provided useful guidance on his issue. See Generally Accepted 
Government Auditing Standards (December 2011). 
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In the summer of 2013 the Department suspended 
issuance of Collection 1 administrative subpoenas and 
usage of existing Collection 1 bulk data. Shortly 
thereafter, Program A was significantly modified to 
eliminate the use of the non-target-specific Collection 1 
subpoenas for bulk collection of telephone metadata. 
Instead, in 2014, the DEA began issuing periodic 
subpoenas to one or more telecommunications service 
provider(s) for telephone metadata related to telephone 
numbers that the DEA or other participating federal 
agency had determined was relevant to specifically 
identified investigations. Each such subpoena 
aggregates a large number of targeted requests in 
specific cases into a single subpoena. Under this 
target-specific approach (Collection 2), the 
telecommunications service provider/subpoena 
recipient, rather than the DEA, queries a bulk telephone 
metadata collection that it maintains for its own 
business purposes. DEA guidance requires that 
investigators requesting Program A products containing 
Collection 2 data demonstrate that RAS exists that a 
target number is being used in the conduct of criminal 
activities. After the service provider delivers the 
responsive telephone metadata for calls to or from the 
target numbers, the DEA generates similar Program A 
analytical products for the requesting federal agencies 
as were generated during the Collection 1 era. Program 
A, modified by the target-specific Collection 2 approach, 
remains active. 

Program B: Program B involved the use of 
administrative subpoenas from 2008 to 2013 to collect 
bulk purchase data for a particular good or service sold 
by selected vendors. The administrative subpoenas for 
Program B data were not directed at or related to 
particular identifiable investigations or targets. Instead, 
the Program B subpoenas were issued periodically to 
selected vendors of the particular good or service and 
required production of customer information for each 
purchase of the good or service. The DEA then queried 
the responsive Program B bulk purchase data provided 
by the vendors against various law enforcement 
databases to identify any matches, or "hits," in order to 
identify potential targets for further investigation. In 
September 2013, following inquiries from the OIG 
regarding Program B, the DEA stopped issuing 


administrative subpoenas in connection with this 
program. 

Program C: Program C is a contractual service 
program, initiated by a non-DOJ government entity in 
2007, under which a telecommunications service 
provider maintains and analyzes its own collection of 
bulk telephone metadata for billions of calls to produce 
expedited or advanced telephone analytical products in 
response to target-specific administrative subpoenas 
from law enforcement agencies, including DEA. 

Program C does not include the content of calls. Among 
other things, upon receiving an administrative 
subpoena, the provider can analyze its own bulk data 
collection to generate reports that identify unique 
connections to target phone numbers. The provider 
maintains and queries the bulk collection; the DEA's 
administrative subpoenas for Program C products are 
issued for particular identifiable investigations or 
targets. Although this program is not one that the DEA 
owns, the DEA is a major customer for Program C 
products. Program C remains active. 

Findings 

Sufficiency of Legal Reviews 

Our review found that the DEA (and the Department 
with respect to Program A, Collection 1) failed to 
conduct a comprehensive legal analysis of the DEA's 
use of its administrative subpoena authority to collect or 
exploit bulk data before initiating or participating in any 
of the three programs. We found this failure troubling 
with respect to Program A, Collection 1 and Program B 
because these programs involved a uniquely expansive 
use of Section 876(a) authority to collect data in bulk 
without making a prior finding that the records were, in 
the language of that statutory provision enabling DEA's 
subpoena authority, "relevant or material" to any 
specific defined investigation. Several published court 
decisions have clearly suggested potential challenges to 
the validity of the DEA's use of its statutory subpoena 
power in this expansive, non-targeted manner. We also 
found the absence of a robust legal review troubling 
because the DEA utilized the bulk data collected by 
means of Program A, Collection 1 and Program B 
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subpoenas on an unknown number of occasions in 
support of investigations by non-DEA federal agencies 
that had no apparent connection to specific drug 
investigations. This utilization raised significant legal 
questions because the DEA had amassed the Program 
A, Collection 1 and Program B bulk data collections 
under its statutory authority, in 21 U.S.C. § 876(a), to 
require the production of data that was "relevant or 
material" to a drug investigation. 

We found that Program C raised different kinds of 
challenging legal issues that the DEA also failed to fully 
assess. We found that the DEA failed to formalize a 
complete and adequate legal assessment regarding its 
use of Program C to obtain reports and other advanced 
analytical information to ensure such use was lawful 
and appropriate under its administrative subpoena 
authority, 21 U.S.C. § 876(a), and the Electronic 
Communications Privacy Act, 18 U.S.C. § 2703(c)(2). 

Adequacy of Procedural Safeguards 

We found that the DEA's procedural safeguards for 
Program A, Collection 2 are not sufficiently clear or 
strong enough to ensure compliance with the 
requirement under Section 876(a) that the information 
being demanded is "relevant or material" to a drug 
investigation. The DEA's guidance document instructed 
users to identify RAS on an electronic request form by 
selecting from a fixed "drop-down" list that contains 
only generic categories of sources from where an 
investigator might have learned about the target 
number, such as a confidential informant. This 
procedure did not provide any particularized factual 
basis on which to assess whether the requisite level of 
"relevance" under Section 876(a) exists between the 
target number to be included on the Collection 2 
subpoena and the underlying investigation. 

Additionally, the electronic form only contained one 
section, a "Remarks" section, where specific facts 
connecting the requested target number to the 
underlying investigation could be documented. 

However, the DEA's procedures lacked standards or 
written guidance on what the "Remarks" section must 
contain. In practice, the DEA typically did not require 
more "particularization" than a single conclusory 
sentence, and did not explicitly require the 


documentation or certification that the request was 
relevant to a drug investigation, as required for a 
Section 876(a) subpoena. 

We also found that the DEA failed to establish any 
polices on storage or retention of the Program B bulk 
data at any time before or during the operation of that 
program. Although Program B is no longer active, the 
DEA has failed to develop a final disposition plan 
regarding tens of thousands of records of purchases 
that reside on DEA servers. Without such a plan, there 
is a risk that the data will be retained for a substantial 
period. 

Efficacy of Audits 

We determined that the DEA's current audit practices 
do not meaningfully examine whether the Collection 2 
subpoenas issued by the DEA in response to Program A 
product requests comply with the requirement in 21 
U.S.C. § 876(a) that the information requested be 
"relevant or material" to a Title 21 drug investigation. 
These audits consisted mainly of confirming that each of 
the thousands of requests from the DEA and other 
participating federal agencies included a selection of 
one of the fixed drop-down selections for RAS. The 
DEA's current audit practices fail to scrutinize the 
"Remarks" section of the form where the only 
substantive information about "relevance" may appear. 
But, as noted above, the information provided in this 
section often lacks specificity sufficient to establish the 
particularized facts or basis for connecting the target 
number to a drug investigation, even if such review had 
occurred. We determined that the current version of 
the Program A request form does identify the requester 
and case number, which information would enable an 
auditor to track a Program A product request to the 
case file and interview the requester to assess whether 
the necessary predication for the request existed. 

Use of Parallel Construction 

In order to protect the unique capabilities of Program A 
and Program C, agents and analysts are instructed not 
to use the information provided in the analytical 
products in affidavits, pleadings, or the like, and to 
keep them isolated from the official files. Users are 
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instructed to "parallel construct" the information 
obtained in these products before using it in reports or 
court proceedings. This may require, for example, 
issuing a new, target-specific administrative subpoena 
to a telephone service provider for the relevant 
telephone numbers identified in the Program A 
investigative product that were determined to be 
related to the investigation. 

We found that there is nothing inherently inappropriate 
about using parallel construction to re-create 
information originally derived from a confidential 
program for use as evidence in court filings, such as 
warrant applications, or even at trial. This practice is 
analogous to using conventional investigative 
techniques to confirm a fact initially disclosed to a law 
enforcement agency in a confidential tip. However, 
parallel construction should not be used to prevent 
prosecutors from fully assessing their discovery and 
disclosure obligations in criminal cases. While the DEA 
has denied misusing parallel construction in this 
manner, we found some troubling statements in the 
DEA's training materials and other documents, including 
that Program A investigative products cannot be shared 
with prosecutors. Such statements appear to be in 
tension with Department policy on a federal 
prosecutor's "duty to search" for discoverable 
information from all members of the "prosecution 
team," which typically includes federal law enforcement 
officers who participated in the investigation of the 
defendant. 

Recommendations 

In total, the OIG made 16 recommendations to the DEA 
to address the issues and concerns identified during our 
review, including the following: 

• Before initiating or reinstating a "bulk collection" 
program by use of non-target-specific 
administrative subpoenas, the DEA should 
conduct a rigorous written legal assessment 
that specifically addresses whether 21 U.S.C. § 
876(a) authorizes the issuance of non-targeted 
subpoenas for exploratory or target- 
development purposes, and the permissible 


conditions under which such bulk data may be 
shared with other federal agencies for non-drug 
purposes. 

• The DEA should issue a final legal opinion and 
updated policy on Program C and its permissible 
uses. 

• The DEA should modify the electronic request 
form for Program A products to require more 
particularized documentation of the information 
to establish RAS and certification that the 
request pertains to a drug investigation. 

• The DEA should develop legally supportable 
criteria for retention of Program B data collected 
by use of administrative subpoenas, and policies 
for the disposition of such bulk data. 

• The DEA and other participating federal 
agencies should conduct periodic audits, on a 
set schedule, of an appropriate sample of 
Program A product requests to confirm, by 
tracking to the investigation from which the 
request originated, that there was an adequate 
particularized factual basis sufficient to establish 
RAS that the target number was relevant or 
material to an ongoing drug investigation. 

• The Department should undertake a 
comprehensive review of "parallel construction" 
policies and practices with respect to Program A 
and Program C investigative products to ensure 
that these policies and practices do not conflict 
with the government's discovery and disclosure 
obligations in criminal cases, or Department 
policy on this subject, and that the 
Department's and DEA's guidance and training 
materials on this subject be clarified as 
warranted. 
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CHAPTER ONE 
INTRODUCTION 


I. Background 

This report examines the Drug Enforcement Administration's (DEA) use of 
its administrative subpoena authority under 21 U.S.C. § 876(a) to collect or 
exploit "bulk data." 1 For purposes of this review, we relied on the Department 
of Justice's (Department or DOJ) definition of a "bulk collection" of data as a 
collection of a significant amount of data that is unrelated to an individual, 
group, or entity that is a target of an investigation, where the data is acquired 
or updated periodically on an ongoing basis. 2 Typically, a "bulk collection" of 
data (often referred to herein as "bulk data") captures records relating to broad 
categories of transactions, such as all purchases of a given item or all telephone 
calls to a broad set of geographic areas. The relevance of any individual record 
within the collection (such as a record of a single phone call or purchase) to a 
specific open investigation is not determined until after the bulk collection is 
acquired. Collections of bulk data may include millions or even billions of data 
points and are often loaded into computers and analyzed by means of 
automated searches. As described herein, in some cases the DEA uses its 
administrative subpoena authority to benefit from a company's ability to exploit 
collections of bulk data maintained by the company. Further, none of the bulk 
collections that we examined included the content of private communications. 

The government's use of collections of bulk data for counter-terrorism 
investigative purposes became the subject of great public interest when Edward 

J. Snowden made public disclosures in June 2013 indicating that the National 
Security Agency (NSA) was collecting billions of telephone call records, or 
telephone metadata, encompassing every call made through the systems of 
certain telecommunications providers where at least one end of the 
communication was located in the United States. 3 


1 Department of Justice Inspector General Michael E. Horowitz recused himself from this 
review because he occupied senior management positions within the Criminal Division from 1999 
through 2002, a time period during which DEA operated, with Criminal Division involvement, one 
of the programs examined herein. We did not interview Mr. Horowitz or review his conduct 
because of the inherent conflict for this office to evaluate the role of the Inspector General. 
Although auditing standards are not applicable to this review, which is not an audit, they provided 
useful guidance on his issue. See Generally Accepted Government Auditing Standards (December 
2011 ). 

2 The Office of the Deputy Attorney General used this definition to identify the scope of 
"bulk collection" programs in DOJ components in the wake of the Edward J. Snowden disclosures 
in June 2013 regarding the National Security Agency's bulk telephone metadata collection 
program. For purposes of this review, we applied this definition to such collections amassed by 
the DEA through its subpoena power, or amassed by private companies and exploited on behalf of 
the DEA upon receipt of a subpoena. 

3 Telephone call records or telephone metadata include transactional details regarding a 
call, such as the date and time of a call, but do not include the content of the communications. 
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Several contemporaneous events after the Snowden disclosures led the 
Department of Justice Office of the Inspector General (OIG) to Initiate this 
review. Later in the summer of 2013, the OIG learned about the DOJ/D EA's 
involvement in a bulk telephone metadata collection program, known as BHM 
in which bulk data involving calls made from the United States to certain other 
countries was acquire^^riean^^dministrativ^ubpoena^ssue^^^^ 
carriers. 


HHNIHIH Also in 2013, the OIG learned that the DEA 
administrativesubpoenas t o collect bulk inf ormation aboutJHmHHMIlBBl 
HHMHHMB (National Initiative or ^^B)7and that the FBI 

had raised concerns about the DEA's legal authority for that collection. In each 
of these programs, the DEA was relying on its delegated authority under 21 
U.S.C. § 876(a) to issue administrative subpoenas, without court or other 
approval outside the agency, requiring the production of records that are 
"relevant or material" to certain narcotics investigations. 

In prior investigations relating to the Department's use of telephone 
metadata, the OIG found problems with the FBI's use of National Security 
Letters, exigent letters, and other informal requests to obtain the production of 
non-content telephone records from communications service providers. 4 Also, 
since 2005, Congress has directed the OIG to conduct four comprehensive 
reviews of the FBI's use of its investigative powers under Section 215 of the 
Foreign Intelligence Surveillance Act (FISA) to ensure, among other things, that 
there has been no improper usage of this authority and to assess the adequacy 
of safeguards established to protect privacy. 5 

The information the OIG learned about the DEA's use of its administrative 
subpoena authority to obtain similar non-content telephone records in bulk 
raised questions that we believe are of potential interest to DOJ leadership, the 
Congress, and the public. Among these were whether the DEA had adequately 


4 See, e.g., U.S. Department of Justice Office of the Inspector General, The Federal 
Bureau of Investigation's Use of Exigent Letters and Other Informal Requests for Telephone 
Records (January 2010); U.S. Department of Justice Office of the Inspector General, A Review of 
the Federal Bureau of Investigation's Use of National Security Letters (March 2007). Although 
these investigations related to intelligence investigative authorities, the legal and policy issues 
addressed in them have relevance to the issues addressed in this report. 

5 See, e.g., U.S. Department of Justice Office of the Inspector General, A Review of the 
Federal Bureau of Investigation's Use of Section 215 Orders for Business Records (March 2007); 
U.S. Department of Justice Office of the Inspector General, A Review of the Federal Bureau of 
Investigation's Use of Section 215 Orders for Business Records 2012 through 2014, Oversight and 
Review Report 16-04 (September 2016). Classified portions of prior OIG reports on this subject 
identified the NSA's bulk telephone metadata collection program through the FBI's use of its 
Section 215 authority. However, only a very limited number of individuals within the Department 
and Congress were authorized to receive that classified information prior to the Snowden 
disclosures. 
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confirmed that it had legal authority to collect bulk data using administrative 
subpoenas, and whether the DEA had implemented adequate safeguards limiting 
the retention of bulk data and ensuring that these data collections were 
protected from unauthorized use by agency employees. Additionally, the OIG 
had not previously reviewed the DEA's practices in this area, but had done so 
several times, as noted above, with regard to the FBI. 

Concerns regarding the government's ability, through broad subpoena 
power, to amass private data in bulk have also been the subject of law review 
commentaries for at least 50 years. 6 Apprehensions about the tension between 
privacy rights and legitimate and lawful government intrusions have become 
even more acute in today's advanced computerized society where a wealth of 
information on people's daily activities is stored electronically by businesses and 
organizations and accessible to government by subpoena. 7 

Our report addresses three programs in which the DEA has used its 
administrative subpoena authority to collect or analyze bulk data in recent 



6 See, e.g., Richard S. Miller, Administrative Agency Intelligence Gathering: An Appraisal 
of the Investigative Powers of the Internal Revenue Service, 6 B.C. Indus. Com. L. Rev. 657, 715- 
16 (1965) (concluding that "one must not be blind to the dangers [from] an agency [that used its 
investigatory powers to establish a bulk data collection for use by all other government agencies] 
would cause to the right to be let alone and to the concomitant protection against the tyranny of 
petty officialdom which that right affords, for these constitute part of the fabric of a society where 
governmental interference with individual privacy has been the exception rather than the rule."); 
Lynn Katherine Thompson, IRS Access to Bank Records; Proposed Modifications in Administrative 
Subpoena Procedure, 28 Hast. Law Journal 247, 281 (1976) (concluding that vast repositories of 
personal information held by banks, telephone companies, and other third parties were not 
adequately restricted from government access by administrative subpoena in the "highly 
computerized society" of the 1970s); Daniel J. Solove, Digital Dossiers and the Dissipation of 
Fourth Amendment Privacy, 75 S. Cal. L. Rev. 1084 (2002) (expressing concern that ease of 
government access by subpoena to commercial digital files on people represents "one of the most 
significant threats to privacy of our times"); and Christopher Slobogin, Transaction Surveillance by 
the Government, 75 Miss. Law. J. 139 (2005) (expressing similar concerns that government 
access by subpoena to digital records of highly personal activities held by third parties is subject 
to insufficient legal restrictions). 

7 See Am. Civil Liberties Union, et al., v. Clapper, et ai., 785 F.3d 787, 794 (2d Cir. 2015) 
(citing alleged privacy concerns from bulk metadata collections in today's technological capacity 
for automated, large-scale reviews). 
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[he_Uiird program addressed in our report, 
involved the us e of administrat ive 
subpoenas to collect purchaser information for every sale of a 
by certain major sellers of such devices. 9 


The program was s ignificantly modified in 2013 to e liminate 

the use of non-target-specific HI subpoenas for bulk calling data. 


TTii^arget-specifi^pproach is called 

As modified to incorporate the program remai ns acti ve. 

DEA suspended in 

2013. 


In examining these programs, we explored (1) the DEA's legal authority 
for the acquisition or use of these data collections; (2) the policies and 
procedural safeguards established by the DEA with respect to the collection, use, 
and retention of the data, including procedures to prevent misuse; (3) the DEA's 
creation, dissemination, and use of products generated from the data; and 
(4) the DEA's use of "parallel construction" or other techniques to protect the 
confidentiality of these programs. 10 A timeline of key events relevant to this 
review is provided in Appendix A to this report. 


II. Methodology 

To investigate the above issues, we reviewed more than 175,000 pages of 
classified and unclassified documents related to the DEA's administrative 
subpoena usage generally or to one or more of the three programs. These 
materials included analyses, briefing materials, charts, guidance documents, 
internal memoranda, investigative materials, policy and procedural manuals, 
reports, representative subpoenas, and training documents. We also obtained 
materials from several DOJ components besides the DEA that had materials 
related to the issues under investigation. These DOJ components were: the 
Office of the Deputy Attorney General, the Criminal Division, the Federal Bureau 
of Investigation, and the Office of Legal Counsel. Additionally, we reviewed 
thousands of pages of emails from the accounts of relevant Department 
personnel at the DEA and other DOJ components. 



9 When we initiated this review, we sought information regarding the DEA's use of^ 
administrative subpoenas for "bulk collection" since 2008. The DEA identified and |^| as 
the only programs involving the use of administrative subpoenas in this manner during this period. 


10 Parallel construction is a DEA term of art that appears in DEA materials for certain DEA 
programs. According to the Office of the Deputy Attorney General, the Department does not 
generally utilize this term for this process in other contexts. 
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We also conducted more than 50 interviews over the course of our 
review. These interviews covered a wide range of personnel with operational 
and managerial responsibility related to the DEA's use of administrative 
subpoenas in the programs we focused on, or generally, including Special 
Agents, Intelligence Analysts, Program Analysts, Division Counsel and 
Department lawyers, Staff Coordinators, Section Chiefs, Office Chiefs, Assistant 
Special Agents-in-Charge, and several other managerial personnel. 


III. Organization of the Report 


This report is divided into six chapters, including this Introduction. 

Chapter Two describes the statutes, regulation s, rules, an d policies relevant to 
this review. In Chapter Three we describe the program, which over 

time has incorporated two different approaches for using administrative 
subpoenas to exploit bulk telephone metadata in support of investigatio ns 
conducted by the DEA and other agencies. In Chapter Four we describe |H, a 
DEA program that used admin istrative subpoenas to collect bulk data regarding 
>urchases of to identify targets for new investigations. 



In Chapter Six we present the 


OIG's analysis and recommendations. 


IV. Access Issues 

For a substantial period after we initiated this review, the DEA took many 
actions that hindered the OIG's access to information available to it that the OIG 
was plainly authorized to obtain under the Inspector General Act. 11 

These actions included failing to produce or delaying the production of 
relevant and responsive materials without any compelling or sufficient basis. 



the DEA provided the OIG with heavily redacted materials on several occasions 
and engaged in a lengthy sensitivity screening of emails prior to providing them 
to the OIG. Further, the OIG discovered many highly relevant documents, which 
had not been produced, only after learning about them in witness interviews. 

This latter issue was particularly significant with respect to the dearth of 


11 5 U.S.C. app. 3 §§ 4, 6. See also Select Committee to Study Governmental Operations 
with Respect to Intelligence Activities, S. Rep. No. 94-755, Book II, at IX, n.7 (1976) (This Senate 
Select Committee, commonly referred to as the "Church Committee" after then-Chairman, Senator 
Frank Church, declared that the "most important lesson" derived from their review was that 
" effective oversight is impossible without regular access to the underlying working documents of 
the intelligence community ") (emphasis added). 
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documents containing legal reviews of programs in our review, which the DEA 
failed to produce to the OIG until a witness identified their existence to us. The 
DEA's actions significantly delayed our review and were wholly inconsistent with 
the requirements of the Inspector General Act. 

The OIG's access to information from the DEA began to improve after 
high-level communications between the OIG and the DEA in December 2014, 
and subsequent involvement by the Office of the Deputy Attorney General. 
Nonetheless, such actions should not have been necessary for the OIG to obtain 
access to information that it was lawfully authorized to obtain. However, 
beginning in mid-2015, the DEA demonstrated a marked improvement in its 
cooperation with the OIG and provided prompt and complete responses to the 
OIG's information requests. 

Additionally, some information necessary for our review was obtained 
from the FBI. The FBI responded fairly promptly to most of our requests for 
information. However, the FBI delayed producing a small amount of grand jury 
materials on the grounds that the OIG was not legally entitled to these materials 
without approval from the Attorney General or the Deputy Attorney General. 

The Inspector General disagreed in testimony before Congress and otherwise, 
noting that the FBI's legal arguments on this issue were inconsistent with the 
plain language of the Inspector General Act and long standing practice of the 
Department and the FBI prior to 2010. 12 


12 In response to this issue, as part of the Department's appropriations in fiscal years (FY) 
2015 and 2016, Congress prohibited the Department from denying the Inspector General timely 
access to records available to the Department and instructed the Inspector General to notify 
Congress if such denial occurred. See Department of Justice Appropriations Act, 2015, Pub. L. No. 
113-235, § 218, 128 Stat. 2130, 2200 (2014); Consolidated Appropriations Act of 2016, Pub. L. 
No. 114-113, Division B, Title V § 540, 129 Stat. 2242, 2332 (2015). In July 2015 and April 2016, 
the Office of Legal Counsel (OLC) issued two opinions, the first finding that Section 218 in the 
Department's FY 2015 appropriations bill did not contain a "clear and unambiguous statement" 
from Congress to override specific limitations on disclosure, such as those for grand jury 
materials, and the second finding that Section 540 in the Department's FY 2016 appropriations bill 
did contain such a "clear and unambiguous statement," and thus the Department was prohibited 
for the duration of FY 2016 from denying the OIG's timely access to such materials. See The 
Department of Justice Inspector General's Access to Information Protected by the Federal Wiretap 
Act, Rule 6(e) of the Federal Rules of Criminal Procedure, and Section 626 of the Fair Credit 
Reporting Act, 39 Op. O.L.C._(July 20, 2015); 

https://www.justice.gov/sites/default/files/olc/opinions/attachments/2015/07/23/2015-07-20-doj- 
oig-access.pdf (accessed December 28, 2017); Authority of the Department of Justice to Disclose 
Statutorily Protected Materials to Its Inspector General in Light of Section 540 of the Commerce, 

Justice, Science, and Related Agencies Appropriations Act, 2016, 40 Op. O.L.C._(April 27, 

2016); https://www.justice.gov/sites/default/files/olc/opinions/attachments/2016/04/28/2016-04- 
27-disclosure-to-ig.pdf (accessed December 28, 2017). The Inspector General consistently 
maintained, before and after the OLC opinions, that the OIG was entitled to these materials by 
virtue of the plain language in Section 6(a) of the Inspector General Act, 5 U.S.C. app. 3 § 6. 
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Ultimately, the access issues faced by the OIG in this and other matters 
contributed to the basis for Congress's enactment of the Inspector General 
Empowerment Act of 2016, Pub. L. No. 114-317, 130 Stat. 1595 (2016), to 
avoid unnecessary and prolonged delays in completing OIG reviews, as 
encountered in this matter. 13 


13 Section 6(a)(1) of the Inspector General Act, 5 U.S.C. app. 3 § 6(a)(1), as amended by 
Section 5 of the Inspector General Empowerment Act of 2016, Pub. L. No. 114-317, 130 Stat. 
1595, 1603-04, provides that the Inspector General of the Department of Justice is authorized to 
have timely access to all records, documents, or other materials available to the Department, 
notwithstanding any other provision of law, except a congressional provision of law that expressly 
refers to the Inspector General and expressly limits the Inspector General's right of access. 
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CHAPTER TWO 

RELEVANT STATUTES, REGULATIONS, RULES, AND POLICIES 

In this chapter we describe the applicable statutes, regulations, rules, and 
policies that govern DEA's use of administrative subpoenas to obtain or exploit 
the data in the programs under review in this report. 


I. Statutory and Constitutional Provisions 

A. 21 U.S.C. § 876 (Administrative Subpoenas) 

By federal statutes, Congress has long granted federal agencies the power 
to issue subpoenas to compel the production of records (and to compel 
testimony) relevant to agency investigations. 14 Subpoenas issued by federal 
agencies within the Executive Branch are commonly referred to as 
administrative subpoenas because the federal agency itself can expeditiously 
issue the subpoena without approval by a prosecutor, grand jury, or court. 
Congress has delegated this power to federal agencies to enable them to fulfill 
their statutory mandates, which may include investigating potential violations of 
federal law. 15 

In the Controlled Substances Act, codified at 21 U.S.C. § 801 et seq., 
Congress delegated to the Attorney General the power to issue subpoenas in 
connection with investigations into drug crimes (referred throughout this report 
as "Title 21" investigative authority). 16 Section 876(a) provides, in relevant 
part, that: 


14 See, e.g., 24 Stat. 379, 383, Sec. 12 (1887) (providing the Interstate Commerce 
Commission the power to issue subpoenas to compel the production of records relating to any 
matter under investigation). 

15 Indeed, when the Department of Treasury was responsible for enforcement of narcotics 
laws, prior to the creation of the DEA, Congress recognized the need to provide the Treasury 
Department with subpoena power, in 1955, to assist in the enforcement of federal narcotics laws. 
See H.R. Rep. No. 84-1347 (1955); S. Rep. No. 84-1247 (1955); see also 101 Cong. Rec. 10085 
(1955)(remarks of Rep. Cooper noting that lack of subpoena authority "handicaps enforcement 
officers" in enforcement of narcotics laws); id., (remarks of Rep. Jenkins summarizing that the 
House bill would authorize the Secretary of the Treasury to subpoena the production of any 
records which the Secretary found "necessary or relevant to an investigation in connection with 
the enforcement of laws pertaining to narcotic drugs and marijuana"). 

16 The DEA's primary enforcement mission is to enforce Titles II and III of the 
Comprehensive Drug Abuse Prevention and Control Act of 1970, Pub. L. No. 91-513, 84 Stat. 
1236, 1242, 1285, which are cited as the Controlled Substances Act and the Controlled 
Substances Import and Export Act, respectively. The Controlled Substances Act is codified at Title 
21, Chapter 13, Subchapter 1, Sections 801-904; 21 U.S.C. §§ 801-904; and the Controlled 
Substances Import and Export Act is codified at Title 21, Chapter 13, Subchapter 2, Sections 951- 
971; 21 U.S.C. §§ 951-971. For purposes of this report, references to the DEA's "Title 21" 
investigative authority refers only the Controlled Substances Act, 21 U.S.C. §§ 801-904. 

Two years prior to enactment of the Controlled Substances Act, which placed drug 
enforcement laws under a single statute, many drug enforcement responsibilities were transferred 
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In any investigation relating to his functions under this subchapter 
with respect to controlled substances, listed chemicals, tableting 
machines, or encapsulating machines, the Attorney General may 
subpena [sic] witnesses, compel the attendance and testimony of 
witnesses, and require the production of any records (including 
books, papers, documents, and other tangible things which 
constitute or contain evidence) which the Attorney General finds 
relevant or material to the investigation. 

21 U.S.C. § 876(a). 

B. 18 U.S.C. § 2703 (Electronic Communications Privacy Act) 

Title II of the Electronic Communications Privacy Act (ECPA), 18 U.S.C. 

§§ 2701-2711, as amended, addresses law enforcement access to stored 
communications. 17 ECPA generally prohibits communications service providers 
from "knowingly divulg[ing] a record or other information pertaining to a 
subscriber to or customer of" a communications service to any governmental 
entity. 18 However, ECPA contains exceptions to this general prohibition, which 
include when a federal governmental entity issues an administrative subpoena. 19 
For example, Section 2703(c)(2) of EPCA requires communications service 
providers to disclose in response to an administrative subpoena not the content 
of communications, but the: 

(A) name; 

(B) address; 


from the Department of Treasury and the former Department of Health, Education, and Welfare to 
a new agency, the Bureau of Narcotics and Dangerous Drugs, within the Department of Justice. 
See Reorganization Plan No. 1 of 1968, 33 Fed. Reg. 5611 (1968). 

In 1973, the Drug Enforcement Administration was established within the Department of 
Justice and the Bureau of Narcotics and Dangerous Drugs was abolished. See Reorganization Plan 
No. 2 of 1973, 38 Fed. Reg. 15932 (1973). Section 1 of this reorganization plan transferred from 
the Treasury Department to the Attorney General "all intelligence, investigative, and law 
enforcement functions" relating to illicit drug activities, except those at ports of entry or borders. 
Reorganization Plan No. 2 of 1973, 38 Fed. Reg. 15932 (1973). For example, the Treasury 
Department has administrative subpoena power under Section 967 of the Controlled Substances 
Import and Export Act, 21 U.S.C. § 967, with respect to investigations to enforce 18 U.S.C. § 545 
relating to smuggling of unregistered controlled substances into the United States. As referenced 
below, the Attorney General subsequently assigned to the DEA Administrator all functions vested 
in the Attorney General by Section 1 of Reorganization Plan No. 2 of 1973, and not otherwise 
specifically assigned. 28 C.F.R. Part 0, Subpart R § 0.100(c). 

17 Pub. L. No. 99-508, § 201, 100 Stat. 1848, 1860 (1986) (sometimes referred to as the 
Stored Communications Act, in contrast to prospective surveillance of content and non-content 
information of electronic communications under Title I and Title III of the Electronic 
Communications Privacy Act, which contains the general federal wiretap statute, 18 U.S.C. § 2511 
et seq., and the pen register statute, 18 U.S.C. § 3121 et seq., respectively). 

18 18 U.S.C. § 2702(a)(3). 

19 18 U.S.C. § 2702(c); 18 U.S.C. § 2703(c)(2). 
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(C) local and long distance telephone connection records, or 
records of session times and durations; 

(D) length of service (including start date) and types of service 
utilized; 

(E) telephone or instrument number or other subscriber number 
or identity, including any temporarily assigned network 
address; and 

(F) means and source of payment for such service (including any 
credit card or bank account number), 

of a subscriber to or customer of such service. 18 U.S.C. § 2703(c)(2). 20 

C. Fourth Amendment and the Third-Party Doctrine 

The Fourth Amendment protects "[t]he right of the people to be secure in 
their persons, houses, papers, and effects, against unreasonable searches and 
seizures." 21 "Searches" are not limited to "physical intrusions" because the 
Fourth Amendment "protects people, not places." 22 Thus, a "search" can occur 
without any physical intrusion if a court finds that a "reasonable expectation of 
privacy" exists. 23 

However, the Supreme Court typically held "that a person has no 
legitimate expectation of privacy in information he voluntarily turns over to third 
parties," and thus the Fourth Amendment does not apply in such 
circumstances. 24 This remains so even if a person provides information to third 
parties "on the assumption that it will be used only for a limited purpose and the 


20 Other provisions of ECPA enable law enforcement agencies to obtain stored content or 
other records beyond the transactional telephone records in Section 2703(c)(2), by administrative 
subpoena or other means, if more stringent conditions are met. Under Section 2703(a) and (b) of 
ECPA, law enforcement agencies can require the disclosure of the contents of wire or electronic 
communications with a search warrant. See 18 U.S.C. § 2703(a) and (b). A law enforcement 
agency can also require the provider of "electronic communications services" to disclose the 
contents of wire or electronic communications that have been in electronic storage for more than 
180 days by administrative subpoena, if the law enforcement agency provides prior notice to the 
subscriber or customer. See 18 U.S.C. § 2703(a) and (b)(l)(B)(i). Further, law enforcement 
agencies may require the disclosure of other records or information of a subscriber or customer, 
not listed in Section 2703(c)(2) with a court order under Section 2703(d), where the government 
provides "specific and articulable facts showing that there are reasonable grounds to believe" that 
the records or other information sought are "relevant and material to an ongoing criminal 
investigation." See 18 U.S.C. § 2703(d). 

21 U.S. Const, amend. IV. 

22 Katzv. United States, 389 U.S. 347, 351-53 (1967). 

23 Smith v. Maryland, 442 U.S. 735, 739-746 (1979) (explaining application of Katz 
"reasonable expectation of privacy" test). 

24 Smith, 442 U.S. at 743-44 (holding that a telephone user had no reasonable 
expectation of privacy in the telephone numbers he dialed and conveyed to telephone company, 
which were recorded by government surveillance through a pen register device). 
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confidence placed in the third party will not be betrayed." 25 Subsequent court 
decisions have referred to this doctrine as the "third-party doctrine." 26 

Notwithstanding the foregoing, the Supreme Court recently ruled that the 
third-party doctrine does not extend to the government's collection of historical 
cell-site location information from wireless carriers. 27 The Supreme Court noted 
that historical cell-site location information provides a "detailed and 
comprehensive record" of a person's past movements from his cell phone's 
connections to the wireless network. 28 The Supreme Court found that given this 
"unique nature of cell phone location records, the fact that this information is 
held by the wireless carrier "does not by itself overcome the user's claim to 
Fourth Amendment protection." 29 The Supreme Court observed that there "was 
a world of difference" between the limited types of personal information 
addressed in older cases where the Court found that the third-party doctrine 
applied (business records of a bank and telephone numbers dialed) and the 
"exhaustive chronicle of location information casually collected by wireless 
carriers today." 30 Moreover, the Supreme Court noted that the underlying 
rationale of the third-party doctrine—voluntary exposure—did not apply to cell- 
site location information because the cell phone itself sends a signal as to its 
location by virtue of operation without any affirmative act by the user. 31 
Accordingly, the Supreme Court held that "an individual maintains a legitimate 
expectation of privacy in the record of his physical movements as captured 
through [cell-site location information]," and thus government acquisition of this 
information from wireless carriers constitutes a "search" for Fourth Amendment 
purposes. 32 However, the Supreme Court noted that its decision was a "narrow 
one" that did not address other matters not before it, including other types of 
cell-site location information or other business records that might incidentally 
reveal location information. 33 


25 United States v. Miller, 425 U.S. 435, 440-43 (1976) (holding that individual had no 
reasonable expectation of privacy in his bank records, which were subpoenaed by the government, 
because he voluntarily conveyed the information to the bank, which was exposed to employees in 
the ordinary course of business, and the materials were the records of the banks). 

26 See, e.g., Carpenter v. United States, 585 U.S._,_(2018) (slip op. at 9-10). 

27 Id. at 10-11, 15, 17, 22. 

28 Id. at 10-11. 

29 Id. at 11. 

30 Id. at 13-17. 

31 Id. at 17, 22. 

32 Id. at 11, 15-17, 22. 

33 Id. at 17-18. 
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II. 28 C.F.R. § 0.104, App., Sec. 4 (DEA and FBI Personnel Authorized 
to Issue Subpoenas) 

By regulation, the Attorney General has delegated authority to issue Title 
21 administrative subpoenas to the DEA Administrator. 34 The DEA Administrator 
has redelegated this power, as codified by regulation, to most managers or 
supervisors in a field office and to certain managers and personnel in the 
Inspections Division at DEA headquarters. 35 These authorized personnel at field 
offices include: Special Agents-in-Charge, Associate Special Agents-in-Charge, 
Assistant Special Agents-in-Charge, Resident Agents-in-Charge, and Special 
Agent Group Supervisors. 36 

The DEA Administrator has also redelegated the authority to issue 
administrative subpoenas to the Deputy Assistant Administrator of the Office of 
Special Intelligence within the Intelligence Division (formerly known as the 
Deputy Chief of Intelligence). This redelegation has existed since 1997, 
although it was effectuated by memorandum and is not codified by regulation. 


III. DEA Agents Manual 

The DEA Agents Manual (Manual) contains approved operational policies 
and procedures to guide the conduct of DEA Special Agents and other personnel 
in drug law enforcement operations and activities. The Manual contains several 
sections on the appropriate use of DEA's administrative subpoena authority, 
including an overview of legal requirements and policies or procedures 
governing the acquisition and use of certain records or information. We discuss 
below the sections relevant to our review. 

A. Business Records Generally 

of the Manual provide guidance on obtaining 

businessrecor^^enerall^^dministrativ^ubpoenas^JB^HHHHHH 

^B^Mltalso identifies the DEA 
personnel at headquarters or field offices who are authorized to issue 
administrative subpoenas, which matches the collective personnel codified in the 
Code of Federal Regulations listed above. 37 



34 28 C.F.R. Part 0, Subpart R § 0.100. The Attorney General has delegated concurrent 
authority in connection with investigations of illicit drug activities to the FBI Director, who has 
redelegated the authority to certain other FBI employees. See 28 C.F.R. Part 0, Subpart P § 0.85; 
App. to Subpart R, Sec. 1 and 4. 

35 See 28 C.F.R. Part 0, § 0.104; App. to Subpart R, Sec. 4. 

36 See id. 

37 See id. 
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Most DEA administrative subpoenas do not seek bulk data. They are 
issued on a one-time basis to a person or organization seeking specific 
information relevant to a particular investigation. (For purposes of this report, 
such subpoenas will be referred to as "conventional administrative subpoenas.") 
The DEA's conventional administrative subpoenas from the NSG are generated 




38 The NSG came online in November 2008. Prior to then hard-copy templates were used 
and OCC's Domestic Criminal Law Section or Division Counsel addressed any case-specific 
questions. 



B. Subscriber/Toll Records 



C. Documentation Requirements 

As noted above, the Attorney General's authority to issue Title 21 
administrative subpoenas has been delegated to certain supervisors in DEA field 
offices, among others. DEA witnesses told us that in general, the process for 
line agents to obtain approvals from authorized supervisors for administrative 
subpoenas is informal, involving direct communications between agent and 
supervisor about the need for such a subpoena in a particular investigation. 
Although the Manual contains some provisions regarding the appropriate use of 
administrative subpoenas, as detailed above, there is no requirement that DEA 
personnel provide an internal written justification accompanying the subpoena 
request that demonstrates compliance with those policies. In particular, there is 
no requirement to document in writing the relevance or materiality of the 
requested information to the investigation for which it is requested. As one DEA 
manager explained, the DEA generally does not go through a written 
justification process that might address questions, such as "why do you need 
this, what are you looking for. . ., what do you expect to get out of it?" Rather, 
he said "[i]t's pretty much. . .on the trust system," and that if it were used 
inappropriately it would be tantamount to falsifying an official record. 
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THE 


CHAPTER T HREE 

I PROGRAM 



The PEA and t he Department of Justice (Department or DOJ) have 
promoted for many years as a "critical tool" for identifying and 

targeting the command and control communications of transnational drug 
trafficking entities, whose organizations are responsible for the significant 
percentage of illicit drugs in the United States. 



39 There is no standard Department (or Executive Branch) definition of “law enforcement 
sensitive." See 81 Fed. Reg. 63336 (Sept. 14, 2016) (promulgating the Controlled Unclassified 
Information Program, 32 C.F.R. Part 3200, establishing "an open and uniform program for 
managing [unclassified] information that requires safeguarding or dissemination controls" due to 
the prior "ad hoc, agency-specific approach" of more than 100 different markings for such 
information across the Executive Branch). The DEA uses the term "law enforcement sensitive" for 
programs with other law enforcement agencies and considers the term to be similar to its 
definition of "DEA Sensitive" information. Under Section 3.5 of the DEA's security classification 
guide, "DEA Sensitive" information is information that, while not meeting the criteria for classified 
materials, requires controls and restrictions from public access. The types of information that DEA 
requires protection under this designation includes: information and materials that are 
investigative in nature and that are critical to the operation and mission of DEA. Protection of 
information with this designation is governed by exemptions in the Freedom of Information Act, 5 
U.S.C. § 552 et seq., such as 5 U.S.C. § 552(b)(7)(E) (exempting public disclosure of information 
that "would disclose techniques and procedures for law enforcement investigations or prosecutions 
. . . if such disclosure could reasonably be expected to risk circumvention of the law"). 


15 







SOD is a headquarters component within the DEA's 
Operations Division, which is led by the DEA's Chief of Operations, who in turn 
serves as the principal advisor to the DEA Administrator and Deputy 
Administrator on all operational matters and programs. SOD was est ablished to 
manage and process investigative and intelligence products from the | 
program and other programs containing classifiedcomponents. Details 
regarding how NS and SOD offices operated during the HH era are 

provided in the subsections below. 

A. The Subpoenas 


As detailed below, the HHJcollection was active from 1993 to 2013. 
The administrative subpoenasfor^U data were not directed at a particula r 
identifiable DEA investigation or target. I 


40 As noted below, the database was routinely purged of metadata relating to calls 
more than 2 years old. 

41 The participating carriers provided additional metadata in the form of proprietary codes 
that the carriers collected for their own business purposes. This data was not meaningful or useful 
to the DEA, but the companies did not spend extra time or money to weed out the data that the 
DEA did not want or use. 
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The subpoenas required the production of metadata for all calls 
made from the United States over the recipient company's network to countries 
that the DEA determined had a "nexus to drugs." Although the explicit criteria 
used to find a "drug nexus" varied over time, DEA records reflected an emphasis 
on countries that had a connection to sources of illegal drugs or precursor 
chemicals, drug trafficking, or drug-related money laundering. By 2012, DEA 
had expanded the scope of "drug nexus" to include countries in which drug- 
related proceeds were being used to support terrorist activities. 

The DEA reviewed and approved the country list for the program 
annually to ensure that these countries continued to have a "drug nexus," as 
demonstrated by the prior year's law enforcement activities and other sources 
on drug trafficking trends. NS completed written justificat ion me moranda for 
proposed countries to retain in, add to, or delete from the bulk collection, 
which required written concurrence by senior managers. By 2013, the DEA had 
developed 10 specific criteria, derived from prior law enforcement activities and 
sources on drug-related trends^hat it used to justify maintaining, adding, or 
deleting countries from the bulk collection. DEA documents and testimony 
indicate that the written justification memoranda and the resulting lists were 
reviewed and approved at varying intervals ranging from quarterly to every 1 or 
2 years by senior DEA managers. Over the years, officials in the DOJ Criminal 
Division, including but not limited to the Deputy Assistant Attorney General, 
reviewed and approved the country list at irregular intervals. 



calls made from the United States to countries on the "drug ne xus" li st, we 
learned that for some companies the DEA prepared a separate 
administrative subpoena to obtain bulk telephone metadata for all calls between 
any of the designated foreign countries that transited a telecommunications 
service provider's network. 



42 As referenced in Chapter Two, the DEA Administrator redelegated the authority to issue 
administrative subpoenas to the NS Deputy Assistant Administrator ii^997. The DEA could not 
locate materials that identified the delegated DEA official who issued subpoenas between 
1993 and 1997. 
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In each subpoena, the Department and the DEA affirmed to the 
company-recipient that the bulk metadata was being sought "in connection with 
ongoing criminal investigative activities" of the DEA and "other U.S. federal drug 
law enforcement authorities as authorized by law," and the responsive metadata 
provided by the recipient "shall be used for tha^urpose only." Like the DEA's 
conventional administr ative subpoenas, the subpoenas were issued on a 

which contained a footer stating that th^subpoena is 
issued under the authority of 21 U.S.C. § 876. The boilerplate does not 

contain statutory language or standards, such as "relevant or material." 
Conventional DEA administrative subpoenas typically state, "pursuant to an 
investigation of violations of 21 U.S.C. Section 801 et seq.," or similar phrasing, 
"please provide^pecified items for a referenced investigation and target, 
whereas the subpoenas simply stated that the recipient was required to 
"produce" the requested data and then "affirmed" that the data was sought "in 
connection with ongoing criminal investigative activit ies." This difference in 
language can be attributed to the fact that the |^H subpoenas were not issued 
directly for a specific case. 


B. The 


Analytical Products 









The SOD 

Coordinator's review ensured that the request contained a sufficient basis 
connecting the target number with an active case, referred to as "reasonable 
articulable suspicion" (RAS). 43 



43 FurtheMnformation regarding the procedure for reviewing RAS and the level of detail 

provided in requests to support the RAS determination is provided in subsection E.I., 

below. In addition, further information regarding the use of data in support of non-drug 
cases is provided in subsection D below. 

44 Only participating federal non-DEA agencies can submit requests for MBHM 
product^) SOD through DICE. N^tat^r local law enforcement agencies participate in the 

program. Unrelated to requests, DARTS provides investigative deconfliction 

functions for the DEA and DICE provides this function for non-DEA federal agencies, as well as 
state and local law enforcement agencies. All subsequent references to DICE in this report relate 
to participating federal non-DEA agencies submitting requests to SOD. 
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C. Use of Products in Drug Investigations 

The DEA has consistently stated that the program played a critical 

role in identifying the U.S. network for major international drug traffickin^^^ 
organizations and their respective "command and control" structures. MHH 







1 1 i| ii i i In I mil i |ii mill i lln ill 1 1 ill lln 1 1 il i i nl Inn this paper 

and other DEA documents stated that federal investigators would be unable to 
identify, in most cases, the U. S.-bas ed operators of theseinternational drug 
trafficking entities without the H component of 

After the program was suspended as discussed below, the DEA sent 
documents to ODAGin 2013 advocating reinstatement of the program. It stated 
that without the data, the DEA's ability to comprehensively "assess the 
true breadth and scope" of transnational drug trafficking entities would be 
severely limited, particularly identification of th eir U.S.-ba sed cells. The DEA 
provided to ODAG several examples from prior BHHi products to highlight 
that the same target numbers queried without the added value of the data 
revealed substantially fewer links to other federal drug cases or connections 
between U.S.-based cells and their foreign sources and leadership network. 45 

The FBI has also stated that access to data enhanced the "breadth 
and quality" of the FBI's investigations by prompt identification of unknown links 
within major drug organizations and interconnectivity with other federal drug 
investigations. In a February 2014 letter to ODAG advocating reinstatement of 
the flti program, the FBI cited several investigations of major drug 
organizations wher^ueries of known "command an^ontrol" target phone 
numbers in the IHHI database, particularly the HI data, resulted in the 
identification of other domestic connections to the organizations and many links 
to DEA or other federal agency investigations. The FBI stated that access to the 
IggH data aided federal drug enforcement agencies in their efforts to dismantle 
the most significant and violent drug trafficking organizations by identifying their 
leadership networks, which it believed otherwise would have been "substantially 
more" difficult. 

D. Use of Data in Non-Drug Investigations 




45 As discussed belowJjh^EA withdrew the request to reinstate the collection in 
August 2014 in favor of the program. 
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Patterson said that the standard applied for requests in non-drug 
investigations wa^ssentiall^h^ame^u^ithou^h^onnectior^o a 
case. 


Patterson said that this standard contained no particular limits beyond 
demonstrating that the request pertained to an active criminal investigation of 
the particular requesting agency. He said the level of specificity to justify the 
request in non-drug investigations would be the same as that required for DEA's 
requests in Title 21 cases. 

Patterson told us that he did not believe there were many instances of 
such usage even though it had been done periodically in certain cases. 


Patterson also based his belief on the fact that he 
never heard about any significant delays for products related to increases in 
requests in non-drug investigations. 



Th e PEA reinstatement documents did not address the 
legal basis for using the collection in this manner. The sample Speedway 
product excerpts that the DEA sent to ODAG in support of reinstating the 
program showed additional instances ir^hid^^BBdat^wa^pparentl^Jsed 
support of non-drug investigations. ^ 



was 


he FBI stated that acces 
legally permissible in these circumstances under the longstanding legal principle 
that evidence legally obtained by one law enforcement agency may be shared 
with another. 46 The FBI's letter did not cite any specific benefits derived from 


access to the 


data in these non-drug nexus circumstances. 


One instance of using the collection in a non-drug investigation 
came to light in United States v. Hassanshahi 145 F. Supp. 3d 75 (D.D.C. 

a . In Hassanshahi, a United States District Court described a use of the 
collection on behalf of Homeland Security Investigations, a component of 
DHS ICE, to develop evidence of a criminal violation of the United States' tra de 
embargo against Iran. DHS ICE was a participating agency in the WMWBMI 
program. The DEA submitted a declaration from then-ASAC Patterson in which 
he set forth the standard, noted above, for requests in non-drug investigations, 
stating that the database "could be used to query a telephone 

number where federal law enforcement officials had a reasonable articulable 
suspicion that the telephone number at issue was related to an ongoing federal 
criminal investigation," and stating further that this standard had been met with 
respect to the search that returned the defendant's telephone number. 47 
Quoting Jabara v. Webster, 691 F.2d 272, 277 (6th Cir. 1982), the government 
argued that this use was consistent with the longstanding legal rule that 


46 As noted in Chapter Two, the FBI also has delegated authority to issue administrative 

subpoenas under 21 U.S.C. § 876(a) in FBI drug investigations. However, under Section 18.6.4 of 
the FBI's Domestic Investigations Operations Guide (DIOG), the FBI cannot issue an 
administrative subpoena unless it is relevant to an open investigation on a specific target. 
Accordingly, the DlO^would not permit the FBI to use its administrative subpoena authority for 
bulk collection^ik^^HI. This issue is discussed in more detail in the next chapter regarding the 
National 'Native. 

47 Although it did not rule on whether Homeland Security Investigations had established 

"reasonable articulable suspicion" for the database query request, the court reported the following 
facts regarding the request: Homeland Security Investigations received an unsolicited email from 
a source concerning an Iranian named "Sheikhi" who contacted the source by email, seeking 
assistance in procuring certain electrical equipment^nd provided an Iranian telephone number 
and business address in Tehran, Iran, and the product request was for calls to that 

telephone number. 145 F. Supp. 3d at 79; 75 F. Supp. 3d 101, 105 (D.D.C. 2014) (citing affidavit 
from Homeland Security Investigations agent). 
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"[e]vidence legally obtained by one police agency may be made available to 
other such agencies without a warrant, even for a use different from that for 
which it was originally taken/' 48 

As noted in subsection E.l.b^elow^/e found other examples that 
appeared to show similar usage of products in non-drug 

investigations during the era. However, as explained below, the written 
descriptions of RAS submitted by requesters were often supplemented by more 
detailed information provided orally or by email to SOD. This additional 
information might have established a drug connection not made clear in the 
written submission. According to the DEA, it had the ability in individual cases 
to determine RAS and the Title 21 nexus of individual requests. However, the 
DEA told us that it lack ed an automated accounting capability to assess the 
collective use of in non-drug cas es, and cou ld only do so by undertaking a 
burdensome manual examination of all records. Thus, we were 

unable to determine the extent of this practice and whether it was consistent 
witl^h^DEA's and the FBI's general statements, noted above, that requests for 
jmHHI products in non-drug investigations during the || era was 
uncommon. 49 

E. Programmatic Safeguards 

In 2007, in respons^x^iuestions from a congressional oversight 
committee regarding the IIHMHI program and its component, the DEA 
identified the following as "programmatic safeguards to ensure that the 
legitimate privacy and civil liberty interests of U.S. citizens were properly 
protected and respected:" 


48 145 F. Supp. 3d 75, 83 (D.D.C. 2015). The government made this argument even 
though such use may not have been consistent with representations made to the subpoena 
recipients. As noted above, in each subpoena, the Department and the DEA affirmed to the 
company-recipient that the bulk metadata was being sought "in connection with ongoing criminal 
investigative activities" of the DEA and "other U.S. federal drug law enforcement authorities as 
authorized by law," and the responsive metadata provided by the recipient "shall be usedfor that 
purpose only." The court did not address substantive issues regarding the underlying BHf 
subpoena or subsequent use of the responsive data because the court found that the Homeland 
Security Investigations's discovery of the evidence that supported Hassanshahi's arrest was 
sufficiently attenuated from the database query that initially identified him. See United States v. 
Hassanshahi, 75 F. Supp. 3d 101 (D.D.C. 2014) (order denying defendant's motion to suppress 
certain evidence discovered during a forensic examination of laptop computer); United States v. 
Hassanshahi, 145 F. Supp. 3d 75 (D.D.C. 2015) (denying motion for reconsideration to suppress 
the evidence based on new information regarding the DEA's database because such information 
did not alter prior ruling regarding the evidence being sufficiently attenuated from the query, and 
suppression of the evidence was not an available statutory remedy under 21 U.S.C. § 876(a) in 
any event). 

49 In response to a draft version of this report, the DEA stated that in June 2017 it added 

features to the automated request process that now enables it tc^ccount for the total number of 
Title 21 and non-Title 21 requests received in connection with successor program. We did 

not evaluate these new features as a part of this review, but will assess them later in connection 
with the DEA's responses to our recommendations. 
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Information that identifies a particular individual, entity or address, 
such as names, dates of birth, Social Security acco unt nu mbers, 
was not sought, accepted or maintained as part of Rather, 

the DEA only sought and maintained the specific ite ms of call 
metadata, described above, that were collected via | 
subpoenas (the originating telephone number, the receiving 
telephone number, call date and time information, call duration 
information, and type of payment). 



A very limited number of personnelTin NS] who were specifically 
traine d for participation in were granted access to the 

| collection. 

All requests for products and the responses thereto were 

routed through SOD "to ensure that the requests originate^] from 
a legitimate requestor and [were] supported by 'reasonable and 
articulable suspicion.”' 

Only upon receipt of a valid request received through proper 
program channels were NS personnel per mitted to q uery the | 
database and use the results as part of a product. 

The DEA maintained a detailed audit trail of all requests, queries 
and responses received, conducted and prepared by the | 
program. 
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As detailed below, the program was suspended in 2013, and it was 
beyond the scope of this review to determine whether the safeguards d escribe d 
above were consistently and strictly enforced during the period that the HH 
program was in operation. From our interviews and the documents the DEA 
provided to us, we found no evidence that the DEA's general description of these 
safeguards was incorrect (apart from the indication that all target numbers in 
product requests were linked to drug trafficking investigations); many of these 
safeguards remain in place toda^with respect to the current version of the 
jjBfMHI program involving HKas discussed beiow. However, we 
identified two safeguards duringtheBHB era to be of particular interest 
because of DEA's claim that they provided a safeguard against the misuse of the 
data that could implicate privacy or civil liberties of telephoneservice 
subscribers: the requirement that each request for a product be 

vetted by SOD to ensure they were supported by RAS and the existence of an 
"audit trail" for all requests. 


1. Reasonable Articulable Suspicion (RAS) 


According to DEA testimony and records, during the period that 
in operation. 



was 


As noted in the prior section, the DEA described the SO D's rev iew 
of this information as an important safeguard to prevent misuse of the BHI 
collection and ensure the protection of the "legitimate privacy and civil liberty 
interests of U.S. citizens." Therefore, we discuss below the training and 
standards to show RAS, and examine sample SOD-approved products. 


a. Training and Standards 

A demonstration of RAS was required for obtaining products 

containing ^^B data, and is also required today in connection with (as 

discussed below). Although this concept is not addressed in the DEA Agents 
Manual, according to the DEA, it is addressed during Basic Agent Training and 
other classes. 51 According to the DEA, SOD Staff Coordinators informed 
investigators in general training sessions or coordination meetings that any 
requests to SOD had to involve an active case or investigation and contain a 
"justification" or "basis" (or essentially RAS^rUTO^heiM^quest^^lS^ to the 
respective active case or investigation. 


Patterson equated 


51 In response to a draft version of this report, the DEA commented that the DEA Agents 
Manual is not the proper venue to discuss legal concepts. However, as discussed in Chapter Two, 
the Manual discusse^everaMegaUiuidelines on appropriate use of the DEA's administrative 
subpoena powerHH^^IHB^^^H/ which provides that administrative subpoenas may be 
used to compel many types of records that are "relevant or material to a drug investigation." 
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the RAS standard to the same level of support that field investigators had to 
demonstrate to their field supervisors with signatory authority on a conventional 
administrative subpoena. Patterson said that investigators understood the 
process and what information was required after submitting one or two product 
requests to SOD. 



For example, Patterson said he would deny a request that only stated 
"number from pocket trash" without stating whose pocket the number cam e 
from and how it connected to the associated case. 



SOD managers told us that, although the RAS justification (previously 
referred to as "remarks") auto-populated in the finished products from NS pre- 
and post-DARTS, the RAS justification contained in the finished products may 
not necessarily reflect an SOD Staff Coordinator's comprehensive understanding 
of the factual basis for the request, which was often clarified through informal 
communications with the requester not reflected in the written request. 


b. Sample Products 


products created during 


The DEA provided the OIG with sample 
the era, which contain the information provided by the requesters in their 

formal written requests. The DEA described these samples to us as bein< 
representative of the results of queries that were accepted 



52 DARTS will not permit a requester to enter a case number unless it pertains to an 
active case number in the DEA's case system. 

53 Patterson told us that prior to 2006, SOD maintained a "very hard line" that no 
requests would be approved without a Title 21 nexus. However, as discussed above^other 
participating federal agencies were sometimes permitted to make requests for HHIH products 
in non-drug investigations after 2006. 
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2 . 


Auditability of Queries 


According to the DEA's records and testimony, each query of the 


database, including the 


otential audit purposes. 


component, left a record trail for 






Similarly, the DEA's written 

response to a congressional oversight committee in 2007 stated that the DEA 
maintained detailed records of incoming requests, queries, and responses for 
audit purposes. DEA witnesses told us that the digital footprint trail at each 
juncture served as a deterrent against concocting requests that were not 
actually supported by RAS. 


of the 


However, the DEA acknowledged that it did not conduct any actual audits 


program during the 


era. Patterson told us that, while 


the DE A has had the capability to audit, the DEA never conducted audits during 
operations because no allegations of problems had been made. 



Likewise, the DEA stated it lacked the ability to generate reports that 


identified the instances in which a 


product was requested in 


connection with a tan 
investigation. 





In short, the record trail created during the era dichio^ppear to 
easily permit the DEA to conduct a proactive audit of whether 
requests were supported by RAS or the frequency with which such requests 
were made in support of non-drug investigations, and no such audits were 
attempted or compl eted. Unde r these circumstances, there is no indication that 
the "auditabilit y" of records served as a deterrent against misuse of 

the program as DEA had indicated to the Department and Congress, 

or for that matter that such "auditability" served any purpose in managing or 
overseeing the program. 55 

Instead, the DEA appeared to rely exclusively on the existence of a record 
trail to serve as a general deterrence measure against misuse by ensuring that 
requesters (or other employees) could not obtain information surreptitiously and 
that several intermediaries reviewe^^Si 165 ^ f° r abnormalities before the 
requesters ultimately received products. 


55 In response to a draft version of this report, the DEA commented that specific case files 
could be examined, if needed, based on allegations of misconduct, but did not identify any 
instances in which such allegations were made or investigated. 
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F. Legal and Legislative Oversight 

In th is section we descri be the legal and legislative oversight of the 
BHHfl program during the |H era by the DEA and the Department. As 
detailed below, there is no evidence th at the DEA or the Department ever fully 
addressed the question of whether the bulk collection was permissible 
under 21 U.S.C. § 876(a). 

1. Early Years 

According to DEA and FBI memoranda and other contempora neous 
records, senior Department officials sanctioned the development of HH in 
the early 1990s. The DEA's historical records reflect tha t in Januar y 1992 
Attorney General William Barr provided approval for the program, 

including after receiving a program briefing, which the Deputy Attorney 

General also attended. The FBI Director also received a program briefing during 
that same time period. The DEA did not provide us with any formal document 
codifying the Department's approval of the program (besides implicit approval in 
the Memorandum of Understanding (MOU) discussed below). Nor did the DEA 
provide us with any formal document discussing the legal basis for what were 
then novel aspects of the program regarding the proposed use of t he DE A 
administrative subpoena authority for collecting bulk data through 

In June 1992, 5 months after the Attorney General's briefing, the DEA 
Administrator, the FBI Director, the Assistant Attorney General for theCriminal 
Division, and a senior Department of Defense official executed the HWW 
program MOU, which set forth the terms of program's operations, including that 
the DEA's Deputy Assistant Administrator for NS served as the Program 
Manager, and the Department (without specifying a particular DOJ component) 
had legal oversight authority over the program. Contemporaneous documents 
showed that the Criminal Division filled this oversight role, which included 
signing the MOU on behalf of the Department. 

We determined that over the years since 1992, the DEA, in its role as 
ProgramManager, briefed numerous incoming senior Department officials about 
the^HH program over the course of its existence, including most of the 
Attorneys General and Deputy Attorney s Gene ral serving during that period. 
Although these briefings noted that the collection was obtained by 
administrative subpoena, we found no evidence that these briefings included a 
discussion of any legal issues raised by the DEA's u se of it s administrative 
subpoena authority to collect bulk data through the H program. 56 Available 


56 In response to a draft version of this report, the DEA commented that various DOJ 
officials over the years had many questions on this usage. To the extent this occurred, we saw no 
evidence of it. According to one DEA manager wh^>rovided multipl^reac^n" briefings to senior 
Department managers over several years, the Hi portion of the briefing typically 

lasted only 3 tc^Wninutes, and he did not recall any senior manager^^jsjng any questions 
regarding the collection. This DEA manager noted that theHHlbriefings were 
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records show that the description of was a small part of a much larger 
presentation relating to and other DEA programs. 

In the early years of the program, a small cadre of Criminal 

Division managers had primary responsibility for legal oversight of the program. 


IHBHHHBHHHHB 57 According to a briefing paper by former DEA 
Deputy Chief Counsel John Wallace, between the late 1990s and early 2000s, 
OCC assumed oversight responsibilities for the program, but this function was 
limited primarily to the Chief Counsel and Intelligence and International Law 
Section Chief (CCI). 58 Despite the Department's prior legal oversight role, 
through the Criminal Division, at inception and for many subsequent years, we 
found no evidence of any written legal review by the Department that provide d a 
basis for the DEA's use of its administrativ^ubpoen^uthont^oi^hHBML 
bulk collection of telephone metadata, BBBBMBBBBBBHiHBi 

likewise foun d no e vidence of any Department analysis of the legal basis for 
querying the database using target numbers having relevance only to 
non-drug-related investigations. Similarly, the DEA stated in response to an 
OIG information request that it could not find an^ocuments that addressed 
whether it would be permissible to query the database and provide 

investigative products in non-drug investigations. 

2. The August 1999 Memorandum 

The DEA provided the OIG with a single memorandum prepared in August 
1999 (August 1999 Memorandum) by the then-CCI Section Chief that concluded 
that the use of administrative subpoenas to collect bulk telephone records was 
constitutional and was authorized under 21 U.S.C. § 876. We determined that 
the August 1999 Memorandum was prepared in connection with discussions 
between the DEA and the FBI regarding the possible wholesale sharing of the 
BIH data collection with the FBI and potential expansion of the country 
list for use in a different, non-drug program of the FBI. Specifically, we found 
that in connection with these discussions the DEA's then-Acting Administrator, 
Donnie Marshall, had directed the CCI Section Chief to prepare a memorandum 
to "act as a c ounter" to legal concerns that the FBI's General Counsel had raised 
regarding the subpoenas. 59 There is no indication that this memorandum 

focused more on the program's capabilities, not on how the data was gathered. A former senior 
Criminal Division manager who also attended many of these briefings gave a similar account to us. 

57 


58 However, the MOU still stated the Department had legal oversight for the program. 

59 In early 1999, the FBI Deputy Director asked the FBI General Counsel to review the 
legal issues surrounded by the proposed FBI program. The FBI General Counsel prepared a 
memorandum concluding, among other things, that the DEA's use of its administrative subpoena 
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was disseminated beyond a few people at the DEA and the Criminal Division, let 
alone formally adopted as the Department's analysis of these issues. 

The August 1999 Memorandum did not a ddress key published court 
decisions available at the time, and at the time HH began, which raised 
pot ential c hallenges to the validity of the DEA's use of Section 876(a) to amass 
the HI collection. Most significant of these omissions was the Supreme 
Court's decision in United States v. Bisceglia, 420 U.S. 141 (1975), which upheld 
the Internal Revenue Service's use of its administrative summons authority to 
require a bank to produce documents evidencing transactions of a certain type 
during a 1-month period to aid in identifying the individual who had engaged in 
the transactions and might be liable for unpaid taxes. However, two concurring 
and two dissenting justices expressed deep concern about the permissibility of 
"exploratory" subpoenas lacking a connection to a genuine, extant 
investigation. 60 In addition, the August 1999 Memorandum failed to discuss 
Peters v. United States, 853 F.2d 692 (9th Cir. 1988), in which the Ninth Circuit 
rejected a subpoena issued by the Immigration and Naturalization Service to a 
farm labor camp manager for all records pertaining to residents of the camp, 
which had been issued in support of a criminal investigation of unknown 
residents who might have been undocumented aliens. The court held that "we 
are reluctant to assume the existence of the power to issue third-party 
subpoenas directed at unidentified targets where Congress has not provided for 
them specifically, nor provided procedural safeguards." 61 853 F.2d at 696. 


authority to collect the 1^1 data was "legally defensible" but "founded on uncertain legal 
ground." The FBI General Counsel's memorandum was shared with the DEA's Chief Counsel, who 
strongl^isagreed with several of the FBI General Counsel's characterizations of the issues raised 
by the |H program, particularly that the program may lack a solid legal foundation^nd noted 
that the Department endorsed the manner in which the subpoenas were used for the IBM 
collect ion. After attempting unsuccessfully to locate any analyses of the legal underpinnings of the 
ili program that might have been prepared by the DOJ Criminal Division or the DEA, the DEA's 
then-Acting Administrator directed the then-CCI Section Chief to prepare "a memorandum 
addressing the administrative subpoena issue, on the theory that such a memorandum could act 
as a counter to any similar but dissenting memorandum that the FBI may produce" to the 
Department on this issue. We found no evidencethat the FBI's proposed program was ever 
activated or that the DEA ever transferred bulk HI data to the FBI for such a program. 

However, as detailed below, notwithstanding theconcerns raised by the FBI General Counsel, the 
FBI ultimately supported reinstatement of the HI program after it was suspended. 

60 The August 1999 Memorandum cited the Bisceglia decision only in a footnote for the 
proposition that "Congress has provided protection from arbitrary or capricious action [from an 
agency's subpoena powers] by placing federal courts between the Government and the person 
summoned." 420 U.S. at 151. As noted earlier, the DEA did not intend to enforce the HH 
subpoenas judicially, and thus the "protection" from "arbitrary or capricious action" would not 
exist in practice. 

61 The August 1999 Memorandum cited in a footnote the then nine reported court 
decisions regarding the DEA's administrative subpoena authority, which included United States v. 
Moffett, 84 F.3d 1291 (10th Cir. 1996). The August 1999 Memorandum noted parenthetically that 
the Tenth Circuit in Moffett held that the defendant lacked standing to challenge a DEA 
administrative subpoena issued to Amtrak. However, the August 1999 Memorandum did not 
include any facts regarding that case or the basis for the ruling. In particular, the Tenth Circuit 
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The first written evidence that we found in which the Department (or the 
DEA) specifically considered legal vul nerab ilities posed by the use of 
"exploratory" subpoenas, as ilmn in occurred in 2005 / 


In 2005, DOJ Criminal Division attorneys in the 
Narcotic and Dangerous Drug Section (NDDS) and the Asset For feiture and 
Mone^Laundering Section (AFMLS) 63 prepared legal analyses of iMMHBMHHW 
MmMM that highlighted the relevance of the Bisceglia and Peters opinions to 
the question of whether the DEA's subpoena authority would permit the 
collection of bulk, non-target-specific data for "exploratory purposes." The 
NDDS memorandum highlighted in bold text that the Bisceglia and Peters 
opinions raised "the question whether any subpoena requesting information on 
all customers transacting certain business with a third-party corporation would 
be interpreted as within the government's investigatory authority." Likewise, 
the AFMLS memorandunr^tate^ha^upon consideration of applicable law, and 
the objectives of and available alternatives," DEA's 

proposed use of administrative subpoenas for exploratory purposes "would 
unnecessarily place one of DEA's most important information gathering tools in 
serious jeopardy of adverse judicial, and possibly legislative, reaction which 
could drastically reduce its usefulness . . . ." 

Additionally, in July 2005, an AFMLS attorney contacted the then-CCI 
Section Chief to notify him that the AFMLS Chief intended to meet with the 
DEA's NS Chief to advise against the us^^dministrativ^u^oenas for 
exploratory purposes as proposed for The CCI Section 

Chief summarized AFMLS's concerns in a high priority email to then-Chief 
Counsel Wendy Goggin, then-Deputy Chief Counsel Michael Ciminelli, and other 
managers. In particular, the CCI Section Chief noted AFMLS's concerr^hatany 
public disclosure of the proposed use of exploratory subpoenas in 
"could have a negative if not devastating effect on SOD and 5th floor projects," 
even if such exploratory usage survived a court challenge. The AFMLS attorney 


ruled that the defendant lacked standing to challenge the DEA's non-target-specific administrative 
subpoena, issued to Amtrak, seeking reservation records for a 1-month period, which DEA Special 
Agents analyzed to identify the defendant, who paid cash for his ticket, and subsequently found 
him traveling with a large amount of illicit drugs. See Moffett , 84 F.3d 1291 (10th Cir. 1996). 
Accordingly, the Tenth Circuit did "not reach the statutory construction issue defendant presses" 
on whether the DEA exceeded the scope of its statutory subpoena power in 21 U.S.C. § 876(a) by 
issuing a non-target-specific subpoena. Id. at 1293-94. 



63 In November 2017, this Section was renamed the Money Laundering and Asset 
Recovery Section. 
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who contacted the C CI Section C hief told us that AFMLS was concerned about 
"negative effects" on 

The AFMLS attorney told us that he became "a sort of Cassandra" figure 
to the DEA and warned them that they "ran a serious risk" of Congress 
subsequently restricting their subpoena authority, as done to the Internal 
Revenue Service following the Supreme Court's ruling in Biscealia^l^h^DEA 
persisted in their proposed use of exploratory subpoenas in 
Three months later, he expounded on these risks in the AFMLS memorandum, 
stating: 



(Emphasis added.) We determined that the memorandum's reference to "the 
use of exploratory Section 876 subpoenas" to acquire this data was a reference 
to the HH collection. The AFMLS attorney told us tha^^iegativ^ourt ruling 
on the DEAs' proposed us^^xploratory subpoenas in risked 

undercutting the whole effort and would be "throwing]" the baby out 

with the bath water." 

Through in-person meetings and emails, AFMLS and NDDS warned DEA 
senior managers in the Intelligence Division and OCC about their concerns, 
stemming from the Bisceglia and Peters opinions, regarding the DEA'^Droposed 
useofitssubpoenaa^ collect bulk, non-target-specific IHHHBB 

Ultimately, the Criminal Division convinced the 
DEA to obtain the equivalent information through alternative means. 

The HHi controversy demonstrates that the Department and 
the DEA were aware of the existence of case law casting doubt on the use of 
ad ministra tive subpoenas to collect bulk data for exploratory purposes, including 
the^^■collection, at least as of 2005. However, we found no evidence that 
the [§■■■■ proposa l caus ed anyone in the Department or the DEA to 
prepare a legal analysis of addressing these issues, or to revisit the 
propriety of the continued use of the administrative subpoenas. 
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4. 


Congressional Oversight 


Our review found that a small number of Members of Congress or their 
staff knew of the ||^^^B program pnoi^o 2007. 64 Briefings provided by the 
DEA touched only superficially on thej^^l program. Following a Senate Select 
Committee on Intelligence oversight hearing in 2007, which included the 
^^^^B program, the DEA's written res ponses to questions for the record 
addressed several oversight issues on the BB collection, such as scope of 
collection, data retention, internal controls (consistent with those described 
above), and external disputes or judicial review. We foun d no e vidence that the 
DEA provided to Congress a legal analysis of whether the BB collection was 
author ized u nder 21 U.S.C. § 876, or that it was asked to do so during the 
period was in operation. 


G. Termination of the 


Collection 


Shortly after the Snowden leaks in June 2013, senior DEA managers from 
the Intelligence Division, the Operations Division, SOD, and OCC convened to 
discuss the e ffect o f these leaks on the DEA's bulk data collection activities, 
including the HB program. In July 2013, the DEA leadership met with 
Department senior leadership, including then-Attorney Ge neral Eric Holder and 
then-Deputy Attorney General James Cole, to discuss the BB component of 
1BBB, among other programs. In the following months, t he DEA briefed 
White House staff and Members of Congress and their staff on and other 
DEA programs involving bulk collection. The DEA also continued working closely 
with ODAG on issues related to bulk collection. 


DEA docume nts est ablish that, at the directio n of the Department, the 
DEA suspended the BH component of BBI^B on August 5, 2013. We 
found no documents, however, stating the reasons for this decision or 
identifying who made it. DEA witnesses involved with the program told us that 
they understood the decision was made by ODAG, but told us they did not know 
the reasons. While we believe that the individuals who made this decision are 
no longer with the Department, based on the timing of the decision (made in the 
aftermath of the Snowden disclosures), the questions presented by ODAG when 
the DEA sought reinstatement (discussed below), and the fact that ODAG 
directed that any replacement program must be target-specific, we believe that 
reasons for th e decision likely included concerns about whether the non-target- 
specific bulk collection was within the authority granted to the DEA under 
21 U.S.C. § 876(a) as well as the controversy and privacy concerns generated 
by the Snowden disclosures about the NSA's bulk telephone metadata collection. 

The BBBB program continuecMsut Quick Checks and Formal Products 
were processed without the use of the data tank. On September 25, 


64 Available records showed that only four Members of Congress received briefings 
between 1996 and 1997, 3 years after the program began, and then none until 10 years later in 
committee oversight hearings in 2007. From 1993 to 2006, we found that approximately 35 
congressional committee staff received briefings. 
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2013, the DEA submitted a formal written request to the Office of the Attorney 
General (OAG) and ODAG to reinstate the HH program^hich included among 
the several attachments a legal analysis in support of |^H ("DEA 
Reinstatement Memorandum"). 

The DEA Reinstatement Memo randum contained a more detailed legal 
analysis of the legal authority for the HI collection un der 21 U.S.C. § 876(a) 
than was prepared before or during the operation of the MHI program. 65 
However, like the August 1999 Memorandum, the Reinstatement Memorandum 
did not address the issues raised by the collection of bulk data by means of a 
subpoena that was unconnected to any specific suspect or investigation, and 
failed to identify or analyze several relevant court opinions, including Bisceglia 
and Peters. In defending the legality of the collection, the DEA 
Reinstatement Memorandum asserted that Section 876(a) provides broad 
subpoena power for "any investigation," without elaboration, related to a Title 
21 dru g nexus. The DEA Reinstatement Memorandum stated that the bulk 
MM data obtained was consistent with the type of "record s" that can be 
obtained with an administrative subpoena and that the bulk ^^| data met the 
legal tests for "relevance" or "materiality" under the statute. With respect to 
"relevance," the DEA Reinstatement Memorandum detailed that courts have 
employed a broad standard to include any records that directly bear on the 
subject matter or could reasonably lead to other information that bears on a 
subject matter. The DEA Reinstatement Memorandum asserted that this broad 
standard does not have defined volume limits and detailed that courts have 
permitted production of voluminous data in circumstances where doing so 
requires identification of the precise information within that mass production 
that directly bears upon the matter being investigated. 

The DEA Reinstatement Memorandum noted that this broad standard of 
"relevance" did not mean the DEA's subpoena power to obtain bulk records was 
boundless. Rather, it stated that if "there is no substantial nexus to 
international drug trafficking activity with a connection to the United States, DEA 
would not seek (and DOJ would not approve) collecting telephone transactional 
records in bulk under its administrative subpoena authority." 66 


65 The DEA's Reinstatement Memorandum provided to OAG and ODAG did not reference 
the August 1999 Memorandum at all, much less as the prior official legal opinion on this matter. 
Nor did we find any evidence that the August 1999 Memorandum was later supplied to the Office 
of Legal Counsel for its review as discussed below. 

66 The expression "substantial nexus" apparently refers to the evidence tyin^^articular 
country on the list to drug trafficking as, earlier in the Memorandum, it states: "The ■Ml 
program gathers large amounts of data about telephone transactions that take place between 
telephones in the United States and telephones in countries that have been determined by DOJ 
and DEA to have a significant nexus to drug trafficking." The DEA's use of the expression 
"substantial nexus" (and earlier in the document "significant nexus") appears to be a shorthand 
reference to the c riteria used to add or remove countries. However, we saw no use of this 
expression in any country reviews or in the documents discussing the country review 
process in the DEA's Request for Reinstatement to which the Reinstatement Memorandum was an 
attachment. 
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The DEA Reinstatement Memorandum further noted that the data 
fell within the scope of permissible transactional data that government entities 
can obtain by administrative subpoena under Section 2703(c)(2) of ECPA. 
Additionally/ the DEA Reinstatement Memorandum pointed out that the DEA's 
administrative subpoenas are subject to court oversight any time a subpoena 
recipient decided not to comply and DEA sought to judicially enforce a 
subpoena. However, the DEA Reinstatement Memorandum also noted the DEA 
has opted not to pursue court enforcement against non-cooperating providers to 
preserve "the security of the program." 


In early 2014, ODAG requested assistance from the Department's Office 
of Legal Counsel (OLC) in considering the structure of the HI program in 
connection with the DEA's proposed reinstatement. On March 20, 2014, after 
reviewing the DEA's Reinstatement Memorandum, OLC transmitted a list of 
more than 30 "Follow-up Questions" to the DEA. Among other things, OLC 
requested the DEA to provide its understanding of the meaning and scope of the 
terms "relevant or material to [an] investigation" in Section 876(a) and to 
identify case law shedding light on the meaning of these terms. On July 1, the 
DEA's OCC provided partial responses to the questions. OCC's partial response 
did not answer OLC's (or ODAG's) questions about the meaning and scope of 
"relevant or material" in Section 876(a), stating instead that such questions 
"require a thorough review of case law" and would take "a couple of months" to 
complete. 



II. 




67 As noted above, we were not able to determine the precise reasons that were given by 
the Department to the DEA for the suspension of the program. It appears from the DEA's 
documents and the testimony of witnesses, however, that DEA officials understood that any new 
program to fill the void from the |^B suspension would require ODAG approval and would have 
to involve target-specifi^ubpoena^oi^elephon^Tietadat^ethei^har^h^Ton-targete^ulk 
collection approach of |BB. 
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68 At the time, Wallace was serving as a contract consultant to the DEA. 
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69 OEA documents sometimes use the term "reasonable 

articulated suspicion" (emphasis added). As discussed below, we believe the correct term is 
"articulable" as expressed by the Supreme Court. 
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70 As noted earlier, SOD organizationally is classified by the DEA as a component of the 
Operations Division in DEA headquarters. ASACs serving at components of DEA headquarters are 
not currently listed as officials to whom the DEA has redelegated the authority to issue subpoenas 
(as opposed to ASACs at field offices) under the DEA's implementing regulations or the Agents 
Manual. See 28 C.F.R. Part 0, § 0.104; App. to Subpart R, Sec. 4; DEA Agents Manual Section 
6614.21. According to the DEA, SOD and the Special Projects Section in particular "frequently 
perform DEA field operational missions and responsibilities" that "are consistent with subpoena 
issuance authority" in DEA's regulations and Agents Manual. Nevertheless, the DEA has not 
formally delegated the authority to such positions in DEA headquarters, and we recommend below 
that it do so if it intends that these officials execute such responsibilities. See Chapter Six, 
Recommendation 15. 
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71 SOD operations include coordinating multi-national investigations against the major 
drug trafficking organizations responsible for the flow of illicit drugs into the United States I 









During the era, compliance with the Section 876(a) requirement 
that records sought by the subpoena be relevant or material to Title 21 narcotics 
cases was plausibly accomplished at the subpoena issuance stage by limiting the 
collection to "drug nexus" countries. The DEA's theory was that, once collected, 
this data could be shared for ot her matters pursuant to Jabara v. Webster; 691 
F.2d 272, 277 (6th Cir. 1982). ■■■■■■■■■■■■ 











practices with respect to documentation of RAS and audits. We discuss 

these in turn below. 

1. Relevance and Reasonable Articulable Suspicion (RAS) 

As noted above, Section 876(a) requires that any information sought by 
an administrative subpoena be "relevant or material" to a Title 21 investigation. 
There are two important dimensions of this requirement: first, that there be an 
adequate evidentiary connection between the information requested and the 
criminal activity being investigated, and second, that the investigation be of the 
correct type, i.e., an authorized Title 21 (narcotics) investigation. 



73 As discussed in Chapter Two, the Electronic Communications Privacy Act (ECPA), 18 
U.S.C. §§ 2701-2711, imposes certain restrictions and obligations on communications service 
providers to protect the privacy of subscribers. Sections 2702 and 2703 of ECPA generally place 
restrictions on the ability of governmental entities to obtain telephone call records from service 
providers, but do not otherwise restrict the carrier's use or disclosure of such data to non¬ 
governmental parties. See 18 U.S.C. §§ 2702 and 2703; S. Rep. No. 99-541, at 38 (1986) 
(Senate Judiciary Committee noting that new subsection 2703(c) of ECPA permits the provider to 
divulge, in the normal course of business, such non-content information regarding a customer's 
use of the service to anyone except a government agency). 
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stop and question an individual or make or traffic stop. In Terry v. Ohio, 392 
U.S. 1, 19-23 (1968), the Supreme Court held that a police officer's 
investigative stop of an individual for purposes of criminal prevention and 
detection is permissible under the Fourth Amendment if supported by 
"reasonable suspicion." The Supreme Court stated that a "police officer must be 
able to point to specific and articulable facts which, taken together with rational 
inferences from those facts, reasonably warrant that [particular] intrusion" upon 
constitutionally protected interests of the private citizen. Id. at 20-21. The 
Supreme Court expounded later that "reasonable suspicion" is simply '"a 
particularized and objective basis' for suspecting the person stopped of criminal 
activity." Ornelas v. United States, 517 U.S. 690, 696 (1996) (quoting United 
States v. Cortez, 449 U.S. 411, 417-18 (1981)). 



DARTS/DICE Procedure 





Below the free-text "remarks" box, the requester is instructed to "select 
justification" by choosing a selection from a drop-down menu of the following 
choices: 



76 According to the PEA, in June 2017, 










78 By contrast, during the era and prior to the adoption of the drop-down menu, 
requesters were required to demonstrate RAS in a free text box. 
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CHAPTER FOUR 



thus fit within a longstanding DEA strategic objective of 


attacking the financial infrastructure of dm^rafficking organizations. As 
det ailed b elow, the DEA stopped issuing subpoenas in 2013, shortly after 
the program was terminated. 


I. The Collection 

The purpose of the bulk data collection was to develop potential 
targets associated with drug trafficking by cross-referencing the purchaser data 
through various law enforcement databases, such as the DEA's Narcotics and 
Dangerous Drugs Information System (NADDIS), an internal database for 
reporting drug enforcement activity. The Office of Fin ancial Operations (FO), a 
component of DEA headquarters^fomiallyann ounced as a headquarte rs 
roqrarr^jndei^enena^n^^MH||^M|^n 

FO informed the field divisions that FO would obtain the bulk purchaser data 
from companies by administrative subpoena, develop investigative intelligence 


82 


83 


84 FO's mission includes providing headquarters expertise in and oversight of the DEA's 
financial investigations of drug trafficking, particularly drug-money laundering activities, and 
leading national program initiatives targeting these illicit acts. FO's Chief reports to the DEA 
Operations Division Chief, who serves as the principal advisor to the DEA Administrator and 
Deputy Administrator on all operational matters and programs. 
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packages with other DEA offices, and disseminate these packages to the field for 
follow-up investigation. Jennings told the OIG that the Chicago Field Division's 
enforcement results "really opened our eyes to what we already thought was 
happening^n^rovided the DEA with a successful example of how to use 
hHBHHHBHIHI as another method to target the major drug 
trafficking organizations. 

During most of the time that HI was in operation, theDEAused 
administrative s ubpoenas to collect information about each HMHMMHI 
WSKKKSHM from the recipient vendors during a designated period, and 
disseminated the raw information to the field offices where the purchasers were 
located. The field offices then were responsible for establishing connections to 
illicit drug activity, typicall^^iinnin^h^at^hrougl^ADDI^i^ther law 
enforcement databases. 



The DEA collected the bulk data on a continuous basis (bi¬ 


weekly, quarterly, or bi-annually) until the program was suspended indefinitely 
in August 2013 for reasons we discuss below. 

A. The H Subpoenas 

The administrative subpoenas for the were not direct ed at o r 

related to a particular identifiable investiqatiorM)i^arget^nstead^h^^M| 
subpoenas were issued periodically to 

under a "general file" number as describecHDelo^anch^quirechjroduction of the 
following customer information for each (1) last 

name, (2) first name, (3) customer's company (if applicable), (4) billing 
address, (5) shippinc^ddress, (6) telephone number(s), and (7) date of 
purchase^JT^irstJ^^^taf^oorriinatoiJ:old us that he identified the five 
largest based on "open-source" research 

and secured each company's advance consent to provide the requested bulk 
data, without any payment, in response to a subpoena. 85 He said that none of 
the companies raised any issues or concerns regarding the volume of 
information requested or the frequency of the DEA's requests. We saw no 
evidence that any company objected to the subpoenas. 

From the program's inception in 2008 to August 2013, the 1M 
subpoenas were generated and signed by the Assistant Special Agent-in-Charge 
(or a Group Supervisor) at the Washington, D.C., Field Division (Washington 
Field Division). As discussed in Chapter Two, the DEA has not delegated the 
authority to issue administrative subpoenas to positions in FO, an office in DEA 
headquarters. After the Assistant Special Agent-In-Charge (or a Group 
Supervisor) signed the subpoenas, a DEA Special Agent in the Washington Field 

85 FO Staff Coordinators are DEA Special Agents who serve as the staff lead on FO's 
programs an^rovide operational support to the DEA field offices, among other duties. There 
were three Staff Coordinators in FO over the life of the program. 
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Division sent the originals and copies to the Staff Coordinator to issue to 
the companies. 

The first subpoena for was issue d shortly after the cable of 

June 3, 2008. Consistent with the cable, the subp oena stated tha t it 

was issued "[i]n the mat ter of the investigation of Case No: 

The ending code BiH referred to the headquarters general file code that was 
created for and was unrelate d to a specific drug trafficking investigation or 
target. Jennings told the OIG that BB was the first time that he used 
administrative subpoenas to request information under a general file that was 
not particularized to a specific target. Similarly, Kevin J. Powers, the DEA 
Division Counsel in the Chicago Field Division, t old the OIG that Chicago's 
regional operation and its national counterpart, represented "the first 

occasion that I ever had . . . where we were operating under a general file and 
sort of using the admin subpoena as a form of target development." Powers 
said that "in all other instances" that he could recall the DEA already had an 
open investigative or general file on a particular target when it issued an 
administrative subpoena. Other DEA managers and Special Agents gave similar 
accounts. 

The standard BI subpoenas stated that the BBBBBBB 
purchase data was being sought "[p]ursuant to an official criminal investigation 
being conducted by the Drug Enforcement Administration of a suspected felony." 
As discussed below , the D EA's Office of Chief Counsel (OCC) reviewed and 
approved a sample BB subpoena with this language in mid-September 2008. 
Witnesses told us that the DEA's view was that there was an oper^nminal 
investigation under the general file—general investigation of BBHBHB 
used to facilitate illicit drug/money laundering offenses. 

However, DEA witnesses acknowledged that at the time any BB 
subpoena was served, there was no open "criminal investigation" on an 
identifiable subject or specific "suspected felony" to which the subpoena related. 
We were unable to determine who developed this language or mandated i ts use , 
but as discussed in more detail below, it already was present in a sampl^BB! 
subpoena when OCC approved it and the DEA required its inclusion in B0 
subpoenas in September 2008. When asked about the mean ing of the phrase 
"pursuant to an official criminal investigation," the first |^B Staff Coordinator 
stated "that's a legaUiuestion" that was "beyond [his] scope," though he 
believed that the BA subpoenas either used standard language or language 
approved by OCC. 86 


86 However, other witnesses, including Powers (the DEA Chicago Division Counsel) and 
the DEA's head of the Domestic Criminal Law Section, a component of OCC which has 
responsibilit^or addressing internal questions on administrative subpoenas, told us they had not 
seen the Bl subpoena language on other subpoenas. As noted in Chapter Two, conventional 
administrative subpoenas reference a specific case number and target by name, phone number or 
some other identifier, even if they contain the phrase "pursuant to an investigation" or similar 
language. 
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Former FO Acting Chief Jennings told us that the "official criminal 
investigation" language referred to the general file because the DEA can open a 
general file on activity and seek to develop information related to suspected 
criminal activity. He said that the "susp ected felony" would be money 
launderinaordrua trafficking, and thus, is "the investigation into the use 
of^MHHfor money laundering or drug trafficking activities." 

Powers told us that the "official criminal investigation" at the time the 
subpoena is i ssued refers to the general file in the heading "In the Matter of 
Investigation HIHHHii-" He noted that it is "absolutely not the [DEA's] 
traditional use of the administrative subpoena" but the "general file covers it." 
Like Jennings, Powers said that the general file was foi^developing 
targets" of drug traffickers and money launderers who use ^HH- 
Maura Quinn, then-DEA Deputy Chief Counsel for Inter nation al a nd Inte lligence 
law, gave similar testimony and noted that, except for |HI and |H|, the 
DEA's administrative subpoena authority is "typically used narrowly" without 
collecting large amounts of information and is "typically connected to a specific 
case." 


B. Receipt of Data and Dissemination of Leads to Field 

As detailed below, the DEA primarily sent all of t he raw data rece ived 
from the vendors regarding thousand^^mxhases of directly 

to the field offices, notwithstanding cable that investigative packages 

would be developed by FO and then disseminated to the field for follow-up 
investigation. In practice, the DEA left it to the field offices to determine how to 
use the raw information. After field offices reported that this information was 
too voluminous to use efficiently, or simply disregarded it, in 2013 DEA began 
comparing the raw purchaser information with other criminal databases to 
identify "hits" and develop intelligence products for dissemination to the field for 
further investigation. This substantially reduced the number of leads sent to the 
field while increasing their potential value. 

1. Dissemination of Raw Data (2008-2013) 

The first Staff Coordinator told the OIG that he received the bulk 
|H data responsive to the DEA's administrative subpoenas. He provided the 
incoming bulk data to an FO Program Analyst for formatting without any 
review of it. He told us that he had assumed the companies would not produce 
non-responsive data because the DEA only requested "limited things." However, 
the Program Analyst explainecHjCMJ^hat^h^'eviewedthe incomin^at^nd 
removecMtem^ha^er^To^^^B||^^^HIHHBB, such as HhHMB 

uploading the bulk data to DEA 

databases. 

Initially, FO was responsible for disseminating the bulk data to the 
field divisions where the purchases had occurred for follow-up action. FO sent 
thes e "raw list s" of data to th e Special Agents-in-Charge by cover memoranda 
from (the cover memoranda"), which stated that FO would 
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subsequently send a target list for follow-up action after running database 
checks on the data. As detailed below, however, we found little evidence that 
such target lists were regularly prepared by FO. 

The Program Analyst told us that the "raw lists" received from the 
vendo rs contained too much information for her to continually format. The first 
m Staff Coordinator told us that the field divisions did not have the time to 
review it all, and further explained that Jennings asked the DEA # s Office of 
Special Intelligence (NS^jechnical support staff to create a computer program 
that could manage the data and automatically disseminate it to the field 
divisions. As a result, sometime between late 2008 anc^arl^009^JS^ 
technica^uppor^taf^reatecUh^B^B module in the BMMBBBNBKI 
^^■■■■■■^■■ir^hich automatically disseminated the bulk 
data as leads, after FO uploaded it, to the rel evant PEA fie ld division contact, 
typically the Field Intelligence Manager. The module also provided 

a means for the fielddivisions to electronicall^^port results from the leads. 
Access to the bulk BB1 data in module was limited to FO 

personnel who uploaded data, the ^^BstaffCoordinator, and NS technical 
support staff. 

We received conflicting information regarding the extent to which FO or 
other DEA offices actually generated target lists for dissemination to the field by 
comparing the raw ^^B data with NADDIS or other law e nforceme nt databases 
during the early years o^he program, as promised in th^^^^H^over 
memoranda. The first ^^B Staff Coordinator told us 



He told us that this process existed until he left FO in 2010. 


The first ^^B Staff Coordinator's account on this subject was not 
consistent with the other inf ormation that the DEA provided to the OIG. Nor did 
he have a recollection of the module generally, which was 

developed during his tenure as Staff Coordinator. While the ^^B module in 
Mm may have had the capability to send NADDIS "hits" to the DEA field 
divisions, as we found was implied in some DEA records, we did not find any 
evidence that this actually occurred. 

To the contrary, the DEA's responses to the OIG's information requests 
unequivocally stated that raw data was disseminated to the field divisions to 
conduct checks in NADD IS and other law enforcement databases before and 
after the creation of the module. DEA records provided to the OIG 

included only one memorandum disseminating a target list of NADDIS hits sent 
to a field division along the linessetforth in Jennings cable during the period 
before the initiation of the module. In contrast, the DEA provided 

us with several hundred pages of "raw lists"senttofield divisions through the 
Jennings cover memoranda prior to the module. Further, the 

Program Analyst and the second ^^B Staff Coordinator both to ld us that only 
raw data was disseminated to the field divisions from the ^^B module in 
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The first Staff Coordinator stated that after FO sent leads to 
the field his role was mainly to obtain division reports of any succe sses—arrests, 
drug seizures, or any other asset seizures obtained from the information. 
He told us that field divisions sent emails or significant activity reports to him in 
which they reported the number of arrests, amount of drugs seized, amount of 
drug-related cash seized, and other property seizures. 87 FO compiled the 
statistical results reported to them in a spreadsheet using the following metrics: 
(1) number of arrests, (2) value of cash seized, (3) number/value of vehicles 
seized, (4) value of dollar of real property seized, (5) number of firearms seized, 
(6) amount of crack seized, (7) amount of cocaine seized, (8) amount of ecstasy 
seized, (9) amount of methamphetamine seized, (10) amount of marijuana 
seized, and (11) amount of heroin seized. FO's spreadsheet showed results on 
fiscal year (FY) and cumulative basis from FY 2008 through FY 2014. 88 The first 
Hi Staff Coordinator told us that Jennings frequently contacted field division 
management to find out wh^ome offices did not send any responses on results 
to FO. However, the first Staff Coordinator stated that FO took "a hands- 
off approach to these things, g[ave] information to the field, and it [was] up to 
the field to either do or not do." 

In October 2010, thefirst Staff Coordinator left FO and a new one 
replaced him. The second Staff Coordinator told us that he did not receive 
any written protocols or check lists for the program from his predecessor or 
elsewhere. T he sec ond Staff Coordinator said that he learned about the 
mechanics of through discussions with the first Staff Coordinator before 
his departure. 

The second Staff Coordinator told us that, after he started, the automa ted 
process of disseminating all raw purchaser data, by zip code, through to 

the relevant field divisions continued for several years. He said that, prior to 
August 2013, FO did not perform any review of the raw data for matches in 
NADDIS or other law enforcement databases before it was automatically 
disseminated to the field. Rather, he said that FO expected the field di visions to 
do that work and determine "if there's something there." 89 The second 
Staff Coordinator told us that he was not aware of any official directive for the 
field divisions to report results. He said that he endeavored to check for results 


87 


As noted above, the first 


Staff Coordinator had no recollection of an 


Module 


and thus did not recall obtaining any results that might have been reported in the 


Module from field divisions. 


88 However, the DEA informed the OIG that FY 2010 through FY 2013 containe^h^^^^ 
combined totals o f both and the non-subpoena operational component of the 
■■■■HI which could not be separately reported. 

89 However, the second Staff Coordinator noted that he initiated some review of the 
raw data earlier in his tenure. Specifically, by the end of 2010 or early 2011, he began reviewing 
the voluminous raw data more closely after he noticed that it contained purchase data for federal 
credit unions, churches, and colleges. He said that from that point on he tried to sift through 
every upload and remove obvious "dead-end leads" from the raw data before it was disseminated 
to the field divisions. 


59 










in the module at least on a quarterly basis, but that he found the 

process cumbersome and that it was not easy to access the results. 



Some field offices raised concerns with the quality of the leads from 
data given the large volume. For example, a DEA manager in one field division 
wrote in an email to FO that "the field has limited resou rces to conduct the 
proper investigati ve follo w-up on the voluminous leads received from FO 
each mont h. The leads should be about quality, not quantity." Likewise, 
the second [Staff Coordinator acknowledged in an email to a DEA colleague 
in July 2012 that: "[TJhere are so many [leads] we put out, we don't know 
what's being done, and why some are better than others." 

Other field offices expressed related concerns regarding the poor quality 
of the leads. For instance, Brian McKnight was a Group Supervisor in the Miami 
Field Division from approximately 2006 to 2011, and later served as an FO 
Section Chief and then Actin g Chief of FO between August 2012 and January 
2014. He told us that H leads were not "a high priority" if the purchasers 
were not active targets. Specifically, he stated: 

[AJgents are very busy [and] unless it directly relates to an [active] 
case. . .there wasn't a lot of welMet^us^o knock on his door 
because the person bought a That's, you know, 

you have to have some reasonable suspicion that a person was 
involved i n illicit a ctivity [before doing that]. [But] it all kind of was 
put in the system. . . . 

McKn ight told us that, after he became Acting Chief of FO, he tried to improve 
|B| by establishing protocols for sending out quality leads, as described in the 
next subsectiomversus simply sending a name to the field because someone 

a ^^^■■1. 

McKnight also stated that the information could be many months old 
before his field office received it. McKnight told us that FO was insufficiently 
staffed to process the large volume of bulk data when he first arrived as an FO 
Section Ch ief in August 2012. Powers, the DEA Division Couns el in C hicago 
where the concept began, stated that his agents thought "was a 
resounding failure at the headquarters level," in part, because of delays in 
purchase information reaching the field. Powers said that the Chicago Field 
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Division started issuing its own subpoenas shortly after began because 
"headquarters was so slow" and the "national [program] wasn't working." 90 

2. Ex pande d Headquarters Efforts to Enhance the Value 
of ■■ Data (2013-2014) 

Beginning in May 2013, DEA headquartersmade efforts to enhance the 
value of the data it was receiving pursuant to HH subpoenas by creating 
intelligence products for the field rather than disseminating raw data. 

a. Organized Crime Drug Enforcement Task Forces 
Fusion Center (May to August 2013) 

From May 2013 through August 2013, FO arranged for the Organized 
Crime Drug Enforcement Task Forces (OCDETF) Fusion Center to query the 
incoming bulk data for possible matches to information in the Fusion 
Center's database, which contains over 500 million records of investigative data 
from member agencies. 


The Fusion Center is a multi-agency operational intelligence center that 
was established under the OCDETF program in 2004 to support member 
agencies in their cases against the most significant drug trafficking and money 
laundering organizations by providing "fused" intelligence products. 91 More than 
15 federal agencies are Fusion Center members each of whom provide their 
respective criminal case reporting data, pursuant to Memoranda of 
Understanding, for incorporation into the Fusion Center database. These federal 
member agencies include the: DEA; FBI; Bureau of Alcohol, Tobacco, Firearms 
and Explosives; Federal Bureau of Prisons; the U.S. Marshals Service; 
Department of Homeland Security Immigration and Customs Enforcement (DHS 
ICE); Department of the Treasury Financial Crimes Enforcement Network; and 
the U.S. Secret Service. According to the Chief Counsel for the Fusion Center, 
most fused intelligence products are generated for use in open investigat ions as 
requested by member agencies. 



Durint 

were done with regard to FO stopped sending 

to the field divisions where the purchases took place. 


the period these checks 
data indiscriminately 


90 Powers told the OIG that he was unawar^haUii^ield division had been issuing 

administrative subpoenas locally for records of purchases due to significant delays 

until shortly before his interview with us. He also discovered, shortly before his interview with us, 
that the Chicago Field Division continued to issue these subpoenas even after the Washington 
Reid Division stopped issuing them for FO, as detailed below. 

91 See U.S. Department of Justice Office of the Inspector General, Review of the 
Organized Crime Drug Enforcement Task Forces Fusion Center, 1-2014-002, March 2014 at 1-2 
(discussing background, mission, and organization of Fusion Center). 
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McKnight told us that both he (as ai^^Sectior^hlef) and his then-FO 
Chief thought that running checks of the * n the Fusion 

Center databasewouldproduceth^Tighes^ualit^ead^itMimite^^sources 
because the 



i 


We found at least five instances where the Fusion Center created 
intelligenc^roducts for non-DEA member agencies based on "matches" of 

with investigative material in the Fusion Center database 
that had no apparent drug nexus. Specifically, th e Fusion Center cr eated four 
intelligence products for DHS ICE on "matches" of 
Fusion Center database with DHS ICE investigations on 


Thus, the ^Hr su bP° enae d 
data apparently was used without limitation to create intelligence products for 
member ag encies in non-drug inve stigation^whenevei^h^|^W-subpoenaed 

The Fusion Center Chief Counsel stated that 
the Fusion Center accepts member-agency supplied data and does not 
independently assess an agency's acquisition of data, which DEA officials 
represented orally was lawfully obtained by subpoena. We found no evidence 
that any g uidanc e or training was provided to Fusion Center personnel limiting 
the use of data to drug cases. 
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The Fusion Center's brief utilization of data ended in August 2013, 
just 2 V 2 months after it began, in large part due to the FBI's concerns about the 


legality of the program, which are detailed in Section II below on legal review of 




b. Internal Review by FO (August 2013 to April 
2014) 


Sometime between August and October 2013, after the Fusion Center 

a ed utilizing data, the DEA began performing it^wi^nalysi^^he 
data before disseminating leads. FO queried_the_^^^^^^^t^^^^in 
NADDIS and other law enforcement databases, 


FO sent 

these investigative leads directly to the field divisions by email. McKnight told 
us that he instituted these practices because "you need to send the best product 
available" t^iel^aents who "have enough to do" and not simply send the 
names of without any connectiont^llicitactivity^McKnight said he 

instructed his staff to send leads where were 

identified in NADDIS, particularly as a target, or in other databases reflecting a 
criminal drug history. 



A former DEA manager of a financial investigative group, who had a lead 
role developing investigative leads as an FO contractor, explained this protocol. 
He stated to us that age nts "don't have time" to review random names unless 
the lea d meaningful, 

WtM- Accordingly, he sought to send leads that "hit" a target in an active case 
or preferably had a "hit" in more than one la\^nforcement database. The 
second Staff Coordinator and the third Staff Coordinator (who began 
in August 2013) told us that they agreed with this approach. They also told us 
that they requested the field divisions provide responses on any results, positive 
or negative, on these leads and followed-up at least on a quarterly basis. 

According to the DEA's records and testimony, FO sent the first lead by 
email in Octob er 2013. As detailed below in subsection I.D., the DEA stopped 
serving subpoenas in September 2013. However, FO finished reviewing 
the la st subpoena returns in April 2014. FO's statistical spreadsheet for 
fflH showe d that the results for this 7-month period in FY 2014, containing FY 
results from subpoenas only, exceeded or roughly equaled t he res ults of 
several metrics for all of FY 2013, containing FY results from both 
subpoenas and the other operational non-subpoena component. Specifically, FO 
reported that the refined leads that FO disseminated during this limited period 
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resulted in more arrests (10 versus 6), vehicles seized (5 versus 0), firearms 
seized (4 versus 2), and 80 per cent of the value of cash seized ($1.2 million 
versus $1.5 million). However, FY 2013 results were greater for seizures of 
cocaine (137 kilograms versus 2.2 kilograms) and marijuan^l2 pounds versus 
3.1 pounds). (No other drug seizures were attributed to |Bl leads during this 
period.) 


C. Maintaining the Confidentiality of the Program 

DEA sought to prevent the program from becoming publicly known 
becausetheywer^oncemed that criminals would take steps to conceaUheir 

knew that data regarding such EflBB 
was being collectedTThe^^^^B cover memorandum that was used beginning 
in 2008 to disseminate the^^Bdata to the fi eld ins tructed DEA personnel "not 
to disclose the source of names" identified via subpoenas when 
documenting their investigations. The memorandum also state d that 
"[p]robable cause must be developed independently." The first Staff 
Coordinator told us that the first instruction was intended to protect the 
program's sources and methods; criminals would obtain money counters by 
other means if they knew that the DEA collected this data. He said that DEA 
personnel were therefore told not t o write o n a DEA Form 6 that the DEA 
received the names in response to BI^H subpoena. 92 DEA documents 
showed that DEA personnel were instructed to state in reports, such as a DEA 
Form 6, tha^he^receivec^Heac^ron^^ource of information that indicated 
that the may be involved in drug trafficking 

and money laundering." The first^^Bstaff Coordinator told us that t he 
directive on usi ng independent sources to corroborate the tips from the BH 
BHBBIHB ensured that the DEA pursued genuine illicit drug activities. 

This instruction was maintained as the evolved. The cover email 
and cover page to the Fusion Center products contained standard caveats that 
the product was sent for lead purposes only, should be segregated from official 
files, and should not be used in court proceedings. The cover email and 
summary page to the FO-generated products did as well. FO therefore included 
as a standard practice caveats that the field shoulc^ievelop their own probable 
cause for the IHI leads and not incorporate the leads data or source into 
official files. 

As dis cussed above, the DEA typically searched for a BBIRHHBI 
HMMM potential connections to illicit drug activities through NADDIS and 
other law enforcement database checks. DEA documents and testimony showed 
that the DEA sought to determine whether those potential indicators of illicit 
drug activity could then be corroborated through traditional investigative 
techniques, such as plain-view surveillance, to warrant initiating a conventional 


92 A "DEA Form 6," as described in the Manual, is "a general purposeformusedto report 
investigative activities and intelligence information to investigative files." of the 

Manual. 
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particularized investigation. In this manner, the DEA could use the same 
independent evidence that served asthe basis to open specific cases as 
evidence in court without disclosing BB!/ which functioned essentially as an 
anonymous tip and not as evidentiary foundation for the case. 93 DEA 
document^lsc^howe^xamples where DEA divisions had alrea dy tar geted the 

foMnvestiaatior^not^o receiving the lead. In 
these circumstancesTthe^^^BIBHHBI^I data could provide additional 
evidence regarding the nature and scope of illicit activities in addition to that 
which already existed. DEA witnesses told us that the requirement to develop 
"independent probable cause" ensure^ha^h^DEAdidno^andomly 
investigate innocent parties because is not a 

criminal act. 


D. Storage and Retention 


The HU 
stored in three 


bulk data (includin 
irimary areas: 


documents incorporate 


was 



elsewhere in the DEA, or the Fusion Cente r. In t his section, we discuss how DEA 
addressed the question of retention of the BH bulk data stored in these 
locations. 


1. Bulk Data on Original CDs 

The first and second |H Staff Coordinators both told us the^vere 
unaware of any retention policies that the DEA developed for the BB bulk data 
during their respective tenures. The first IBi S taff Coordinator told us that th e 
DE^i^ioHiav^n^olicie^rn^tention of the BHHfHHHH^IBlBI 
MBBBHBHKHHBHHBH He said that "we didn't know what to 
do with them . . . they're not evidence . He told us that he kep^^H in a 
locked cabinet and informed the second Staff Coordinator of BB^ca^ 011 
until FO could figure out what to do withl^H- He stated that "we weren't 
interested in establishing any kind of database of, you know, anything other 
than having this [data] to send leads to th^ielcKcnnvestigate/^iT^econci^ 
BH Staff Coordinator the 


After the OIG initiated this review, the DEA told us that no BHl 
subpoenaed information received by DEA had been purged or destroyed since 
the program began in 2008. In addition, the DEA stated that it was working to 
develop a retention and destruction schedule for such materials. One DEA 


93 However, FO notified field investigators that they would have to reveal the original 
source of information from subpoenas if th^uestion ever arose in actual testimony. We 
found no evidence that the DEA ever revealed in live testimony or elsewhere. However, 
Powers told the OIG that in approximately three to four cases a judg^equired the government to 
disclose in camera how a defendant originally was targeted through subpoenas without 
requiring disclosure to defense counsel. 
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attorney workin g on th is issue told us that FO had not contemplated a retention 
schedule for the bulk data until the OIG raised this issue. 


In June 2015, the DEA received approval from the National Archives and 
Records Administration for a retention and destruction schedule, submitted in 
March 2015, relating to "non-actionable information obtained pursuant to 
service of a DEA Administrative Subpoena." Althoug h the retention and 
destruction schedule description appears to apply to data held in all 
locations without distinction, the DEA's testimony and infonmatiorw^sponses 
showed that the DEA intended for this schedule to pertain 
9HHHHHI Under this disposition schedule, DEA received approval to 
destroy the original CDs within 3 years after date of receipt. 


2 . 


Bulk Data in 


Module 


The second 
what the retention 


| Staff Coordinator stated that he had no knowledge of 
>olicy would be for the 



Then-DEA Deputy Chief Counsel Quinn told the OIG that she did 
not kn ow if t he DEA had the resources or technical ability to identify the specific 
BUM data in that has investigative value. 


3. Bulk Data Stored Elsewhere 


The DEA stated in response t^r^I^nformatior^*eques^ha^^ 
headquarters program general files are 

destroyed or deleted 25 years after the cutoff date (which is 6 years after the 
last activity or correspondence). Therefore, under current policy and practice, 
all non-cas^pecific data stored by FO or elsewhere at the DEA (other 
than in /.e., purchaser data that was never connected to a specific 

investigation, will be retained for at least 25 more years (though Quinn did not 
think it would be accessed, in part due to the speed with which drug trafficking 
organizations change and the historical nature of the data). 


II. Legal Review of 

In this section w e desc ribe three occasions in which questions were raised 
regarding whether the program was a permissible use of DEA's 
administrative subpoena authority under 21 U.S.C. § 876(a). 

A. Initial Review in September 2008 

In early July 2008, 1 month after^^H began, Powers sent an email 
inquiry requesting a legal review of the HBT su bpoenas to two OCC managers, 
Michael Ciminelli and Donna Sanger, who oversaw the Domestic Criminal Law 
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Section (referred to as CCM). 94 Powers's request arose after he briefe d two 
Assistant U.S. Attorneys (AUSAs) in the Northern District of Illinois on HH- 
Powers told us that he informed the AUSAs that the DEA's use of a general file 
to issue administrative subpoenas to develop targets was "out of the ordinary/' 
but he was comfortabl^with the subpoena use based on Chicago's success 
before FO launched Powers's email request to Ciminelli and Sanger 

stated that the AUSAs inquired whether anyone at OCC "had consulted with FO 
on the scope of the administrative subpoenas to be sure that they were in 
compliance with 21 U.S.C. § 876." 

Powers's email stated that "in my opinion" the DEA was "well within the 

statutor^uthority^ecaus^h^rogram^^onceptstemme^|HHHH 

Powers's email added that the Chicago 
Field Division decided to send the question from the AUSAs to Ciminelli and 
Sanger "to be on the safe side, given the recent scrutiny regarding 
administrative] subpoenas." Powers told us that the "recent scrutiny" referred 
to an internal review of the DEA's use of administrative subpoenas in the wake 
of the OIG's report of the FBI's misuse of National Security Letters in 2007. 95 
Ciminelli replied by email the next day that "we do not believe that CCM has 
ever reviewed the subpoena," and would obtain "a copy from FO to review it 
now." 


Two months later, however, OCC had not responded to Powers's email 
inquiry. In early September 2008, Sanger notified Ciminelli that she assigned a 
senior attorney in CCM (Senior Attorney 1) to review the "subpoena question." 
Sanger also remarked that she saw "nothing wrong with it on the surface, but 
[hasn't] seen the actual subpoena." 


94 CCM is the unit within OCC responsible for addressing administrative subpoena issues. 

95 See U.S. Department of Justice Office of the Inspector General, A Review of the Federal 

Bureau of Investigation's Use of National Security Letters, March 2007. Following this OIG report, 
OCC conducted an internal review in May 2007 of its documented legal advice and guidance 
regarding administrative subpoenas for the prior 5 years, including a review of training and 
materials in the DEA Agents Manual relating to administrative subpoenas. OCC's summary report 
concluded that its substantive legal advice regarding administrative subpoenas had been correct. 
However, OCC found that the DEA Agents Manual omitted some important procedural guidelines, 
such as restrictions imposed by other federal statutes on the use of administrative subpoenas, and 
actions to be taken if the DEA received unauthorized information in response to an administrative 
subpoena. OCC also found that its training academy failed to have OCC attorneys provide the 
training on legal rules for administrative subpoenas to new agents and new group supervisors who 
would have authority to sign subpoenas. OCC's internal report documented the measures taken 
or to be taken to address the deficiencies that were found. OCC's report noted, without 
discussion, that "specialized legal support for certain DEA intelligence programs utilizing 
administrative subpoenas," a description that possibly included was supervised by the 

Deputy Chief Counsel for International and Intelligence Law. Significantly, the OCC report did not 
address the issue of whether Section 876(a) authorizec^EA to collect bulk data by administrative 
subpoena for target development purposes as done in or for subsequent exploitation in 
specific cases as done in 
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On September 9, 2008, Sanger sent Powers's July 2008 email inquiry to 
Senior Attorney 1. Senior Attorney 1 responded 2 days later to Sanger, copying 
Ciminelli and Powers, stating that she had "no legal objections" after reviewing 
sample subpoena. Senior Attorney l's response, which attached a sample U| 
subpoena, also noted that the subpoenas requested raw data from companies 
that was disseminated to the field divisions as leads to develop their own 
probable cause. 96 Senior Attorney 1 separately forwarded her lega^onclusion 
to Jennings and a former FO Section Chief, who notified the first Staff 
Coordinator by forwarding the email to him. 

Senior Attorney 1 told us that she did not have an independent 
recollection of this issue. 97 However, she remarked that on current reflection 
the subpoena language appeared fine because it seemed to her that the DEA 
had a specific target or was investigating a specific crime. She added that if she 
had understoo d at the time th at the DEA was merely issuing "blanket" 
subpoenas on purchases between certain dates without 

connection to an open case then she likely would have advised against it 
(despite her email reflecting that she knew the raw data was being disseminated 
to the field as leads to develop their own probable cause). 

After Senior Attorney 1 replied "no objection," Sanger emailed Powers 
that "my view is probably the same as yours. Unless a federal court tells us we 
can't do this, I think we can continue this project." 

None of the 2008 emails regarding the legal underpinnings of made 
reference to the fact that a very similar question had been raised ^yeai^arlier, 
ii^onnectior^itl^to BHIHi 

As detailed in 

Chapter Three, in 2005, the DOJ Criminal Division Narcotic and Dangerous Drug 
Section (NDDS) and Asset Forfeitur^n^Jone^^undering Section (AFMLS) 
both prepared legal analyses of that highlighted the 

relevance of United States v. Biscegiia, 420 U.S. 141 (1975), and Peters v. 
United States, 853 F.2d 692 (9th Cir. 1988), to the question of whether the 
DEA's administrative subpoena authority in 21 U.S.C § 876(a) permitted the 
collection of bulk, non-target-specific data for "exploratory purposes." The 
AFMLS memorandum opined that the DEA's proposed use of its administrative 
subpoena authority for exploratory purposes to gather bulk wire remitter records 


96 Senior Attorney l's "no objection" response stated that she had conferred with a mo re 
senior CCM line attorney. Powers pointed out to us that the DEA headquarters delays on H 
even extended to his legal questions-noting that it took 2 months before headquarters responded 
with a "one-liner, yes." 


97 Howeve r, Senior Attorney 1 said she did recall advising FO to be car eful on the scope of 
collection bee 



whereas in more recent Department projects she 
recalled much discussion on how to avoid ”retain[ing] information on innocent people." 
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in "entail[ed] significant risk of adverse consequences" 

from both courts and Congress to such use. 

The absence of any reference to this analysis was particularly noteworthy 
given that Ciminelli and o thers in OCC had been ale rted to the Criminal 
Division's concerns about In July 2005, the then-OCC 

Section Chief of International Law (CCI Section Chief) sent a high priority email 
to then-Chief Counsel Wendy Goggin, then-Deputy Chief Counsel Michael 
Ciminelli, and other managers to notify them that the AFMLS Chief intended to 
meet with the DEA's Office of Special Intelligence Chief to advis^gains^he use 
of admin istrative subpoenas for exploratory purposes, like BMWBBWBMf 
WSUM Among other concerns, the CCI Section Chief noted that AFMLS was 
concerned that Congress might substantially restrict the DEA's administrative 
subpoena authority, as it had done with the Internal Revenue Service after the 
Bisceglia opinion, even if such exploratory usage survived a court challenge. In 
any event, we f ound n o evidence that Ciminelli or anyone else in OCC 
recognized that H^^^^jsecHhe same issues about the scope of Section 876(a) 
that arose in proposed operation. 

B. FBI Concerns at the Fusion Center in May 2013 

As noted above, beginning in May 2013, DEA sent HI data to the 
OCDETF Fusion Center for analysis. On May 15, 2013, then-FO Section Chief 
McKnight reported to OCC that FBI agents had raised questio ns to DEA 
management at the Fusion Center about "the legality" of the ^Hi subpoenas 
and utilization of the Fusion Center to query the Htt data, which FO recently 
had started to send there. McKnight requested guidance from OCC, noting that 
his then-FO Chief had received a telephone inquiry on this issue from Fusion 
Center Chief Counsel. One week later, a DEA attorney in CCM provided 
McKnight the September 2008 response to Powers's inquiry, discussed above. 

The FBI agents we interviewed described their concerns at t he tim e. 

First, they were concerned about the broad scope of the "blanket" 
subpoenas to obtain information simply because somebody purchased a HHB 
CM . They told us that in their collective experience at the FBI they could 
not issue an administrative subpoena without it being based on a specific target 
or case. Some of them also noted that the FBI's policy governing use of 
administrative subpoenas did not permit "blanket" usage. 98 As one FBI agent 
explained the concern about the "blanket" |^| subpoenas: 


98 Under Section 18.6.4 of the FBI's Domestic Investigations Operations Guide (DIOG), 
the FBI cannot issue an administrative subpoena under 21 U.S.C. § 876(a) unless it is relevant to 
a predicated drug investigation. Also, under Section 6.9 of the DIOG, the FBI has authority to 
issue administrative subpoenas in Preliminary Investigations. Section 6.1 of the DIOG provides 
that a Preliminary Investigation "may be opened on the basis of any 'allegation or information' 
indicative of possible criminal activity or threats to national security." Section 6.5 of the DIOG 
describes the predication required in this circumstance as particularized to a specific criminal 
activity or national security threat and the involvement or role of specific individuals, groups, 
organizations, or entities in such activity. 
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[I]t wasn't predicated on individual cases or individual suspicions. 

Rather, it [was] just a general fishin^xpeditior^becaus^ne had] 
a good sense that some people that PBBBWBHl 

may also be using [them] for illicit purposes. . . . [But] you can't 
just take any [kind of] innocent activity that Americans engage in 
and go grab all their records knowing that a small percentage of it 
is potentially connected to illegal activity. And that sounded 
exactly like what DEA was looking to do. 

Second, the FBIaaentswer^onceme^bout the Fusion Center 
personnel running all through the Fusion Center 

database to mine for potential connections to an actual investigation. They 
explained that running all of these names, which had been collected without 
foundation, through a massive government database and producing 
comprehensive intelligence products on any "hits," which included detailed 
information on family members and pictures, "didn't sit right with any of 
[them]." 

The FBI agents' concerns were raised to the Fusion Center Deputy 
Director, an FBI employee (FBI Deputy), who told us that he shared the same 
concerns. The FBI Deputy told us that underlying part oftheFBI's concerns was 
that DEA and Fusion Center management tried "to push very quickly," 

but it "needed to be really vetted and looked at by [FBI headquarters 
management] seven ways to Sunday" to ensure that it was consistent with the 
FBI's policies and protocols. The FBI Deputy told us that h e notif ied the Fusion 
Center Director that the FBI was not going to participate in until he 
received approval from FBI headquarters because "it just didn't seem right" in 
his experience. The Fusion Center Chief Counsel stated that the FBI's dataset is 
a significant partof the Fusion Center database, but it was n ot included in the 
queries of the H data due to the FBI's objection to 

The FBI Deputy related to us that a meeting was held with then-FBI 
Deputy Assistant Director of the FBI's Crimin al Inv estigative Division, after the 
FBI Deputy raised the collective concerns on to the then-Section Chief of 
the FBI's Criminal Investigative Division and an FBI Office of General Counsel 
(OGC) attorney. The FBI OGC attorney told us that after reviewing the statute 
and the DIOG it was clear to her that in "the FBI world you have to have a 
specific predicated investigation" to issue an administrative subpoena, but the 
DEA was not necessarily subject to the same constraints. 99 The FBI OGC 
attorney said that she informed the FBI Deputy Assistant Dire ctor th at the FBI 
could not have used its administrative subpoena authority for|H/ if it was an 
FBI program, "unless we had an individual [or organization] that we're trying to 
target" because of the DIOG's requirements. However, the FBI OGC attorney 
stated that she also explained to the Deputy Assistant Director that the FBI 


99 The FBI OGC attorney told us that the FBI lawyers who wrote the DIOG interpreted the 
statute, 21 U.S.C. § 876(a), to require an open investigation, or in FBI policy a "predicated 
investigation" particularized to a target. However, she told us that she understood that the DEA 
did not have such policy constraints. 
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could use the ^^J-subpoenaed data because the DEA collected the data under 
its authority (and not at the FBI's direction). 

The FBI OGC attorney told us that after hearing these points the FBI 
Deputy Assistant Director decided that the FBI would not participate in at 
the Fusion Center. 

The FBI Deputy said that he notified theFusion Center management 
about the FBI's decision not to participate in and it was "not received 
well/' particularly by DEA as the "parent agency" pushing the initiative. 

According to Fusion Center Chief Counsel, the FBI's decision not to participate in 
BB at the Fusion Center was the primary reason why the Fusi on Cen ter's 
then-Acting Director (not a DEA employee) decided not to make a 
permanent part of theFusion Center operations after the pilot project ended. 

FO ceased sending ^^J-subpoenaed dat a to th e Fusion Center in August 2013. 
We turn next to the DEA's legal review of in late July 2013 in response to 
the OIG's inquiries. 

C. OCC's Review before OIG Meeting in August 2013 

Two months after McKnight reported the FBI's concerns on IB, OCC 
initiated a legal review of the program in response to inquiries that DEA had 
recently received about the program from the OIG. Specifically, in late July 
2013, DEA's CCM Section Chief assigned a senior CCM attorney (S enior A ttorney 
2) to review whether the DEA's use of administrative subpoenas in was 
overbroad in preparation for an upcoming meeting with the OIG. Senior 
Attorney 2 sent his legal assessment in two lengthy emails to the CCM Section 
Chief and OCC senior manager, Maura Quinn. 100 

In the first email, Senioi^ttome^^iscussed at length the 2005 NDDS 
memorandum regarding which, as described in 

Chapter Three, highlighted the relevance of the court opinions in Bisceglia and 
Peters to the question of whether the DEA's Section 876(a) authority would 
permit the collection of bulk, non-target-specific data for "exploratory purposes." 
Senior Attorney 2 noted that the 2005 NDDS memorandum was "directly on 
point" to analyze the use of "exploratory" or non-target-specific subpoenas in 
(MU- His review of the memorandum's in-depth analysis of courtrulings 
concluded that it was "unclear what a court would do with the Bl subpoenas" 
because of conflicting court rulings in the most comparable cases. 

In the second email, S enior Attorney 2 addressed Quinn's question on 
whether the language in the Bl administrative subpoenas was "legally 
suff icient. " He responded to Quinn that the DEA had a "good-faith belief that 
the |Bi subpoena^ir^eqall^ustainable," even if not directed to a particular 
suspect, based on founcMrwjrior drug trafficking investigations. 

However, he stated that he thought the |B subpoenas "would be quashed" if 


100 At the time, Quinn was serving as Acting Deputy Chief Counsel for Operational Law, 
which oversaw CCM. 
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challenged in the Ninth Circuit Federal Court of Appeals, which issued the Peters 
opinion. 

Quinn told us in her interview that she did not recall a specific discussion 
with Senior Attorney 2 or others about his legal assessment on Sh^lso 

told us that OCC did not issue a final assessment on the propriety of the HBI 
subpo enas after Senior Attorney 2's review because the DEA ceased issuing the 
f(|§| subpoenas in September 2013. However, she stated that "risks" were 
highlighted to senior managers if th^rogram continued after the Washington 
Field Division stopped issuing the IBM subpoenas, as discussed below. 


III. DEA Stops Issuing Subpoenas 

The DEA told us that the Washington Field Division provided FO with the 
last administrative subpoenas for BB° n or about August 1, 2013, and these 
subpoenas were sent to the respective companies on September 16, 2013. 

In July 2013, Kevin Carter became an Assistant Special Agent-in-Charge 
of the Washington Field D ivision and received an overview of the office's 
act ivities , including He told us that he assumed from the brief overview 

on that his office's involvement related to active criminal investigations on 
specific targets being done by his office. However, he told us that sometime 
between late July and early August 2013 he learned that his office's i nvolve ment 
did not involve any specific cases when he was given a large stack of |B! 
subpoenas to sign. Carter told us that he did not feel comfortable signing 
subpoenas unrela ted his office's specific cases and instructed the Special Agent 
assigned to to notify FO that the August 2013 batch would be the last one 
signed by him. 101 

Nevertheless, FO sent the next batch of unsigned subpoenas to Carter in 
December 2013. Like prior batches, these were blanket subpoenas that d id not 
relate to specific, identified cases. Carter told us he refused to sign these BB 
administrative subpoenas requested by FO. 

FO continued to seek reinstatement of the program. In late March 
2014, the then-FO Chief emailed Quinn inquiring whether the Washington Field 
Division or some other DEA office with delegated subpoena authority could issue 

■ subpoenas. Quinn told us that she pointed out the risks with continuing 
to the Acting Chief of Operations and others, which included legal risks on 
whether the statute permitted such use and the current environment (in which 
the NSA's bulk telephone metadata collection program had been criticized by 
privacy advocates and the Obama administration had outlined plans to end it). 


101 Carter told the OIG that he signed the batch in August because H was a recognized 
headquarters program, the subpoenas had already been prepared, and he had not an opportunity 
to instruct his staff to notify the FO point-of-contact that he would no longer sign them. 
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B i told us that the Acting Chief of Operations favored continuing with the 
subpoenas notwithstanding the risks. 

In May 2014, the then-DEA Deputy Administrator transferred HB 
responsibility from FO to NS^hich had been delegated administrative subpoena 
authority (and issued the BI subpoenas discussed in Chapter Thre e). 
However, according to the DEA, NS has not issued any subpoenas for|B and 
the program has not been reinitiated since it was transferred to NS. The DEA 
Special Assistant to the N^Chief told us that the NS Chief never gave him the 
"green light" to restart BB- The Special Assistant told us that the NS Chief 
told him they would not restart the program until they received approval from 
senior DEA managers, which they have never received, and that the program 
remains dormant. 

However, the Chicago Field Division (and possibly others)continued to 
issue their own administrative subpoenas related to local ^^^BB^B 
purchases. We were told that the Chicago Field Division continued issuing such 
subpoenas until approximately No vembe r 2014, when field division personnel 
heard about the OIG review of the |B program. 102 We found no evide nce that 
an^DEA field offices have continued to issue blanket subpoenas for local 
Hi purchase data since November 2014. Further, the DEA stated in 
information responses to the OIG that no DEAfield offices are issuing 
administrative subpoenas on behalf of FO for BB 


IV. DEA Assessments of Value of the Program 

Former FO managers and ^Bl Staff Coordinators uniformly told us that 
— was a valuable and worthwhile program. McKnight told us that it was a 
very successful program that brought benefit to DEA, notwithstanding hi s issue s 
regarding resources and qualit y of lea ds. Similarly, the first and second IBB 
Staff Coordinators echoed that |^B was a resounding success, citing that it 
resulted in approximately $50 million of drug proceeds seized, significant 
seizures of illegal drugs and drug-related assets, and arrests based on the 
spreadsheet that FO used to compile results. 103 Powers also said that the 


102 We obtained sample copies of administrative subpoenas issued by the Chicago Field 
Division after the Washington Field Division ceased issuing them on behalf of FO. Although these 
subpoena^ontainec^iifferenUanguage, they were functionally equivalent in that they requested 
the sam e information under the same general program file code of 

mUM for the national initiative. 


103 FO's spreadsheet showed the following cumulative results for for FY 2008 
through 2014: (1) 131 arrests, (2) $48 million in drug-related cash seized, (3) 88 vehicles seized 
(worth approximately $207,000), (4) $4 million in real property seized, (5) 179 firearms seized, 
(6) 162 grams of crack seized, (7) 678 kilograms of cocaine seized, (8) 0 tablets of ecstasy 
seized, (9) 148 pounds of methamphetamine seized, (10) 21,381 pounds of marijuana seized, and 
(11) 22 kilograms of heroin seized. The OIG did not seek to test or corroborate these totals, 
particularly given the DEA's acknowledgment, noted earlier, that the results for the majority of 
years reported, FY 2010 through FY 2013, are not attributed solely t^^^B but rather include 
results from another operational component unrelated to use of the B^Bsubpoenas that cannot 
be separately reported. 
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program, as run locally by the Chicago Field Division, was viewed as a success 
that resulted in sizeable seizures of drugs, money, and guns. FO's results 
compiled for the Chicago Field Division showed that Chicago was in the top tier 
of divisional results for most metrics, including approximately 25 percent of all 
seizures of dru g-rela ted proceeds and 63 percent of all seizures of firearms 
attributable to BBI nationwide. 

A former FO Section Chief from March 201^c^ebruary 2015, told the 
OIG that the arrests and seizures attributable to likely were under¬ 
reported because FO lacked a "standardized" and "consistent" process for field 
divisions to report results to FO on a set schedule. He added that "as a 
manager" the fa ct that FO personnel could not provide him with statistical 
results for BB^t^JY "given time" was a "problem." Indeed, as discussed 
earlier, the first^^B Staff Coordinator did not proactively monitor what field 
divisions did with the leads; rather, field divisions reported results to him as 

a iappened and in their preferred reporting format. Additionally, the second 
Staff Coordinator told us that he was not aware of any official reporting 
directive for the field division^cM^port results. He said that he endeavored to 
check for results in the module at least on a quarterly basis, but 

found the process cumbersome and not easy to access the results. Aside from 
the statistics noted above, the DEA Administrator's quarterly issue papers, used 
to keep the Administrator curre nt on is sues or congressional matters, routinely 
included a bulleted-reference to as one of the important national financial 
initiatives targeting drug traffickers. 
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CHAPTER SIX 

ANALYSIS AND RECOMMENDATIONS 


In this chapter the OIG presents our analysis and recommendations 
regarding the DEA's use of administrative subpoenas to exploit collections of 
bulk data. We focus on four main topics: (1) the sufficiency of legal reviews 
that have been conducted in connection with the bulk collection programs; (2) 
the adequacy of procedural safeguards that the DEA currently has in place to 
ensure, among other things, that DEA subpoenas are issued in full compliance 
with 21 U.S.C. § 876(a) and to prevent misuse of data collections; (3) the 
efficacy of audit procedures employed by the DEA with respect to ongoing bulk 
programs; and (4) the use of "parallel construction" to protect the programs 
from public disclosure. 


I. OIG Assessment of the Adequacy of Legal Review Conducted for 

the Bulk Collection Programs 

The HH ar| d HI programs involved a uniquely expansive use of 
Section 876(a) authority to collect data in bulk without making a prior findinc 
that the records were relevant to any specific defined investigation. The 
program involved the collection of telephone call records for billions of telephone 
calls from the United States to many different countries. The DEA amassed this 
historical repository of information for future processing to later identify a tiny 
por tion th at would be relevant to actual dru g inve s tigations. In some resp ects, 
the collection was even broader than 


_ but was limited to the transactional details of the calls. Most or all of 

the data was sent directly to the field offices for their use to develop new 
targets for investigation, withou^n^r^collection determination that a 
connection existed between the ^Hl^l and an existing investigation. 


Both programs presented the question of whether a non-target-specific 
"exploratory" subpoena to collect bulk transactional data satisfied the 
requirement under 21 U.S.C. § 876(a) that the information sought be "relevant 
or material ... to [an] investigation." ^J£DEA's use of "exploratory" 
administrative subpoenas in and was not consistent with DEA's 
normal practice of issuing subpoenas in con nect ion wi th a specific case or target. 
As a result, the language used in the and did not resemble standard 
DEA administrative subpoena language that Division counsel or OCC typically 
saw. In light of these circumstances, we would have expectedathorough legal 
analysis of this unique use before the DEA launched or However, 

such was not the case. 


Another issue raised by the bulk collection programs is whether the bulk 
collections, amassed pursuant to the DEA's authority to investigate narcotics 
cases, could permissibly be queried on behalf of other agencies in support of 
non-drug investigations. As detailed below, we did not find that the legal 
analysis of this issue was adequate either. 
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A. 


1. Legal Validity under Section 876(a) 

We found no evidence that anyone in the D epartment or the DEA 
prepared a comprehensive legal analysis of HH particularly the use of 
administrative subpoenas to amass a bulk collection of telephone metadata, 
prior to the program being established. The DEA did undertake a written legal 
analysis of the program in the August 1999 Memorandum. However, as far as 
we were able to determine, due to the close hold nature of the program, the 
August 1999 Memorandum had very limited distribution and was not intended to 
bethe Department's "official legal review" regarding the permissibility of the 
H bulk collection. Therefore, it did not provide a comprehensive legal 
assessment on the statutory validity of the subpoenas, which should have 
been prepared at program inception. Among other things, the August 1999 
Memorandum did not address any of several published court decisions available 
at the time, (and at the time began), clearly suggesting potential 
challenges to the validity of the DEA's use of Section 876(a) to amass the ^^9 
collection. Among these decisions was United States v. Bisceglia, 420 U.S. 141 
(1975), which upheld the Internal Revenue Service's use of its administrative 
summons authority to require a bank to produce documents evidencing all 
transactions of a certain type during a 1-month period, to aid in identifying the 
individual who had engaged in such transactions and might be liable for back 
taxes. Four concurring or dissenting justices in Bisceglia expressed deep 
concern about the permissibility of "exploratory" subpoenas lacking a connection 
to a genuine, extant investigation. In addition, the August 1999 Memorandum 
failed to discuss Peters v. United States, 853 F.2d 692 (9th Cir. 1988), in which 
the Ninth Circuit rejected a subpoena issued by the Immigration and 
Naturalization Service to a farm labor camp manager for all records pertaining to 
residents of the camp, which had been issued in support of a criminal 
investigation of unknown residents who might have been undocumented aliens. 
The court held that "we are reluctant to assume the existence of the power to 
issue third-party subpoenas directed at unidentified targets where Congress has 
not provided for them specifically, nor provided procedural safeguards." 853 
F.2d at 696. 

The earliest written evidence that we found in which the Department (or 
the DEA) specifically considered and assessed th^egal vulnerabilities posed by 
the use of "exploratory" subpoenas, as done in j^Bjj^a^r^OO^wher^h^^^ 
DEAproposecUous^ubpoena^(^ollecU3ulk£^^B|^^^^^^^^^H|[^^H 

DOJ Criminal Division at torneys in NDDS and 
AFMLS prepared legal analyses of that highlighted the 

relevance of the Bisceglia and Peters opinions to the question of whether the 
DEA's subpoena authority would permit the collection of bulk, non-target- 
specific data for "exploratory purposes." As detailed in Chapter Three, we 
determined that the AFMLSmemorandum explicitly linked the potential legal 
vulnerabilities of the prop osal as creating risks to the DEA's use 

of "exploratory" subpoenas to amass the collection, and ultimately to the 
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WKKSKKttKtBTLn light of these risks, the Criminal Division convinced 
the DEA to obtain the equivalent information through alternative means. 

The controversy demonstrates that the Department and 

the DEA were aware of the existence of case law casting doubt on the use of 
ad ministra tive subpoenas to collect bulk data for exploratory purposes, including 
the 1^1 collection, at least as of 2005. 126 Yet we found no evidence that 
anyone in the Department or the DEA prepared a comprehensive legal analysis 
of^Hat any time durin^t^peration, including after the issue was squarely 
raised in connection with in 2005. 

A more detailed legal analysis of the statutory basis for the HiH 
collection was OCC's 2013 Reinstatement Memorandum, which was prepared 
expressly for Department leadership after the Department suspended the 
program. In that document, the DEA cited numerous cases in support of an 
argument that the "relevant or materiar standard under 21 U.S.C. § 876(a) is 
extremely broad and permits requests for the production of large collections of 
records. However, even the DEA's Reinstatement Memorandum failed to 
address the unique issues raised by the collection of bulk non-target-specific 
data by means of an exploratory subpoena that was unconnected to any specific 
suspect or investigation. In particular, it never addressed the concurring or 
dissenting opinions by the four Justices in Bisceglia or the Ninth Circuit's 
decision in Peters, even though the Criminal Division had pointed out the 
relevance of those decision^^DE^rianaqers eight years earlier in connection 
of 

It appears that one reason the Department and the DEA d id not see the 
need for a critical legal analysis of the statutory validity of subpoenas was 
its understanding that the issue was unlikely to be litigated because the DEA 
never intended to serve a subpoena on an unwillin^arriet^^haMudicial^^^ 
enforcement would never be required. 127 


12 ®The Department and the DEA were also likely aware of such case law in the early 
years of after a failed attempt to challenge the DEA's authority to issue a non-target-specific 
subpoena under 21 U.S.C. § 876(a) on the basis of the rulings in Bisceglia and Peters. 

Specifically, in 1996, the Tenth Circuit ruled that the defendant lacked standing to challenge the 
DEA's non-target-specific administrative subpoena, issued to Amtrak, seeking reservation records 
for a 1-month period, which DEA Special Agents analyzed to identify the defendant, who paid cash 
for his ticket, and subsequently found him traveling with a large amount of illicit drugs. See United 
States v. Moffett, 84 F.3d 1291 (10th Cir. 1996). Accordingly, the Tenth Circuit did "not reach the 
statutory construction issue defendant presses" on whether the DEA exceeded the scope of its 
statutory subpoena power in 21 U.S.C. § 876(a) by issuing a non-target-specific subpoena. Id. at 
1293-94. 

127 The Moffett case would have provided additional support for the notion that no such 
review was required because the Department and the DEA could assert lack of standing to deflect 
most challenges, given that the DEA had the cooperation of the subpoena recipients as they had 
with Amtrak in Moffett. 









_The DEA paid the carriers 

to comply with the subpoenas expeditiously and on an ongoing basis, and the 
Department reassured the carriers that their compliance was legal in letters. 

We do believe, however, that even assuming the absence of litigation 
risk, there still should have been a thorough legal review to ensure that the 
Department was utilizing its authorities properly. Indeed, we believe that the 
intentional absence of effective judicial review made it more important that a 
careful internal analysis of the legal validity of the program be conducted to 
ensure that the program was conceived and operated in compliance with the 
law. 128 


Additionally, the issues underlying the Second Circuit's decision in Am. 
Civil Liberties Union, et al. f v. Clapper^^l., 785 F.3d 787 (2d Cir. 2015), 
provide further confirmation that the (HI program raised difficult issues that 
warranted careful examination by Dep artme nt or DEA attorneys. Although 
Clapper was decided 2 years after the program had been suspended and 
20 yeareafter it began, it is probative in our analysis of the legal authority for 
the program because the bulk data collection addressed in Clapper was 
comparable to the program and the legal issues confronted by the Clapper 
court were essentially the same issues that were r elevant to and foreseeably 
raised by the Department's operation of the HI program years earlier. 

The NSA program at issue in Clapper involved the use of court-approved 
orders from the Foreign Intelligence Surveillance Court (FISC) to a U.S. 
telephone service provider for telephone metadata for virtually every call made 
through its systems or using its services, where one or both ends of the call 
were located in the United States. The orders were issued under the authority 
of Section 215 of Foreign Intelligence Surveillance Act (FISA), which at that time 
authorized the government to obtain a court order requiring the production of 
records, including metadata, upon a showing that the records are "relevant to 
an authorized investigation" to protect against international terrorism or 
clandestine intelligence activities. See 50 U.S.C. § 1861(a)(1), (b)(2)(A) 

(2014). Thus, the relevancy standard under Section 215 was similar to the 
requirement in Section 876(a) that records be "relevant or material to [an] 
investigation" relating to controlled substances and other listed subjects. 21 
U.S.C. § 876(a). 

The data collected included originating and terminating phone numbers, 
time and duration of the cal ls, and other metadata-data nearly identical to that 
collected through the |^H subpoenas but for an even larger set of calls, 


128 Indeed, as part of its brief and aborted internal review of in 2014, OLC 
transmitted many follow-up requests to the DEA, including a request to identify case law shedding 
light on the meaning and scope of the terms "relevant or material to [an] investigation" in Section 
876(a), to which the DEA responded that it would need "a couple of months" to complete, and 
never did because the program was discontinued. 






unrestricted by the "drug nexus" requirement. Like the program, the NSA 
program involved the subsequent exploitation of the data collected by querying 
the collection with seed numbers that were believed, based on "reasonable 
articulable suspicion" (RAS), to be associated with a foreign terrorist 
organization. However, unlike the program, the RAS determination under 
the NSA program was not made unilaterally by the agency, but rather was 
subject to approval by the FISC in an ex parte proceeding. 

The Second Circuit held that the NSA program was not authorized under 
Section 215 of FISA because the data being demanded initially did not satisfy 
the requirement that it be "relevant to an authorized investigation." The court 
observed that "[t]he records demanded are not those of suspects under 
investigation, or of people or businesses that have contact with such subjects, or 
of people or businesses that have contacts with others who are in contact with 
such subjects." 785 F.3d at 813. The government conceded that vast amount 
of metadata collected did not contain directly "relevant" information, but argued 
that such data was "nevertheless 'relevant' because they may allow the NSA at 
some unknown time in the future, to utilize its ability to sift through the trove of 
irrelevant data it has collected up to that point, to identify information that is 
relevant." Id. at 812 (emphasis in original). 

The court rejected this interpretation of "relevance" as defying "any 
limiting principle," as it could be applied to collect and store in bulk any other 
sets of metadata available anywhere in the private sector, including metadata 
associated with financial records, emails, and social media relating to all 
Americans. Id. at 818. The court stated that "such an expansive development 
of government repositories of formerly private records would be an 
unprecedented contraction of privacy of all Americans." Id. at 818. 

As a result of the Hassanshahi case (discussed in Chapter Three), the 
Second Circu it was made aware of the DEA's use of ad ministra tive subpoenas 
for the bulk data collection and observed that the program "may 
have demanded an interpretation approaching the breadth of the government's 
interpretation of similar language [in Section 215]" that the court rejected in 
Clapper. Id. at 812, n.6. However, the court di d not o pine on whether the 
language of Section 876(a) permitted the DEA's bulk data collection 
because the issue was not before it and the program had been discontinued. Id. 
Nevertheless, we believe that most or all of the reasoning found in Clapper 
would have likely applied with similar force in any judicial asse ssmen t of 
whether the DEA's use of its subpoena authority to amass the collection 
was consistent with 21 U.S.C. § 876(a). 129 Indeed, some of the differences 


129 w^re not opining that the Second Circuit's ruling in Clapper would have ultimately 
meant that would have been found to be beyond the bounds of Section 876(a). The 
Department disagreed with the Second Circuit's ruling in Clapper and was appealing it, but the 
case was mooted by the USA FREEDOM Act of 2015, which prohibited "bulk collection" under 
Section 215 of FISA. Additionally, as we note next, many judges had previously ruled that the 
NSA's bulk telephone metadata program was consistent with Section 215 of FISA. 
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between the programs—such as the effective lack of independent judicial 
oversight for might have made a challenge even more compelling. 

To be clear, we are not opining that a thorough legal analysis of the 
program would inevitably have concluded that the program was inconsistent 
with Section 876(a). There are arguments to the contrary and case law to 
support them, as reflected in the DEA's Reinstatement Memorandum. First, 
many of the cases the DEA cited and the arguments made regarding the broad 
concept of "relevance"—including "bulk collection" of records to identify the 
"relevant" data—were accepted by several FISC judges with respect to the NSA's 
bulk telephone metadata collection program prior to the amendments to Section 
215 of FISA, and one federal district court judge from the Southern District of 
New York, prior to being overruled by the Second Circuit. See Am. Civil 
Liberties Union, etai., v. Clapper, etai., 959, F. Supp. 2d 724, 746-49, 

(S.D.N.Y. 2013), rev'd, 785 F.3d 787 (2d Cir. 2015). Thus, reasonable minds 
may differ on at least this aspect of the issue. Second, it is unclear if the 
statutory term "investigation" in 21 U.S.C. § 876(a) countenances a "general 
investigation," consistent with Title 21 dut ies, that would permit the scope of 
administrative subpoenas issued for or E.g., United States v. 

Oncology Servs. Corp., 60 F.3d 1015, 1020 (3d Cir. 1995) (finding that 
administrative subpoena could be issued for "general investigation" within 
agency's statutory authority) (citations omitted). Third, the government's 
burden in obtaining a court order to enforce compliance with an administrative 
subpoena is not significant, particularly with respect to "relevance" of the 
requested information. See, e.g., Fed. Trade Comm'n v. Carter, 636 F.2d 781, 
788-89 (D.C. Cir. 1980) (citations omitted) (agency's determination of 
"relevance" satisfied "if the documents sought are 'not plainly irrelevant' to the 
investigative purpose" or not '"obviously wrong.'"); Nat'l Labor Relations Bd. v. 
Am. Med. Response, Inc., 438 F.3d 188, 193 (2d Cir.2006) (noting that courts 
defer to an "agency's appraisal of relevancy" to its investigation "so long as it is 
not obviously wrong") (citations and internal quotations omitted). It is possible, 
th erefore , that a court could conclude that the bulk collection obtained by BBS! 
or H| subpoenas was not "obviously wrong" to support the general 
investigative purposes of seeking evidence regarding illicit drug activities in the 
United States. 

In sum, we observe that there were significant legal issues raised by the 
DEA's use of "exploratory subpoenas" that warranted a careful examination, and 
that this did not occur. In this regard, we previously concluded in our review of 
the Department's involvement with the President's Surveillance Program that 
"classified programs that press the bounds of established law" should be 
supported by a collaborative legal opinion of sufficient legal and technical 
expertise. 130 So too here. 


130 U.S. Department of Justice Office of the Inspector General, A Review of the 
Department of Justice's Involvement with the President's Surveillance Program, July 2009, at 395. 
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2. Querying the Data for Non-Drug Investigations 

We determined that on an unknown number of occasions, the data 
collection that was created from 1993 through 2013 was queried in support of 
matters that had no known drug nexus, sucJ^js investigations of major 
terrorism events. As we have noted, the collection was amassed pursuant 
to the DEA's authority to issue administrative subpoenas relevant to Title 21 
drug investigations based on the theory that the countries to which the 
communications were directed had a sufficient nexus to illicit drug activities. In 
response to a specific OIG information request, the DEA told us it could not 
locate any legal reviews, analyses^or other documents that addressed the 
decision to allow the use of the HI collection for non-drug cases, the criteria 
for allowing such uses, the volume of such cases, or the legal authority for such 
uses. Nor could we find any such documents among the materials provided 
from other DOJ components. 

Moreover, as discussed above, it does not appear that the use of [^H in 
non-drug cases was limited to major terrorism investigations. In United States 
v. Hassanshahi, 145 F. Supp. 3d75 (D.D.C. 2015), a United States District 
Court described a use of the HI collection on behalf of Homeland Security 
Investigations, a DHS component, to develop evidence of a criminal violation of 
the United States'trade embargo against Iran. The DEA submitted a declaration 
stating that the collection "could be used to query a telephone number 
where federal law enforcement officials had a reasonable articulable suspicion 
that the telephone number at issue was related to an ongoing federal criminal 
investigation ." (Emphasis added). The defendant alleged that this use of the 

data in a non-drug case violated 21 U.S.C. § 876(a). Quoting Jabara v. 
Webster, 691 F.2d 272, 277 (6th Cir. 1982), the government argued that this 
use was consistent with the longstanding legal rule that "[ejvidence legally 
obtained by one police agency may be made available to other such agencies 
without a warrant, even for a use different from that for which it was originally 
taken." 145 F. Supp. 3d at 83. 

Although the Court in Hassanshahi did not rule on whether Homeland 
Security Investigations had established "reasonable articulable suspicion" for the 
database query request, the standard articulated by the government in that case 
implies that theDEA and the Department did not recognize any impediment to 
querying the HI database, collected under the authority of Section 876(a), in 
support of any federal criminal investigation, without regard to whether the 
investigation related in any way to drug trafficking. 

We believe that this theory of unlimited use raises difficult questions of 
law and policy that the DEA and the Department should have analyzed carefully. 
One of the DEA's justifications for using its Section 876(a) authority to collect 
metadata for billions of phone calls to scores of countries was that that the 
collection would be queried for drug trafficking investigations, thereby ensuring 
that the investigative products would be relevant and material to an 
investigation within the DEA's jurisdiction. Yet, this limit disappears if other 
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agencies, including agencies having no administrative subpoena authority of 
their own, can exploit this drug-derived collection for non-drug purposes. 

Again, the OIG is not opining on whether the DEA's theory of the 
potentially unlimited sharing of the data collected through for non-drug 
investigations was or was not legally correct. We found only that neither the 
DEA nor the Department adequately framed or analyzed the issue in order to 
ensure that this vast collection of information was being used consistently with 
the law. 131 


The DEA likewise did not conduct or request any significant legal analysis 
to support its use of exploratory subpoenas before the ■■ program began. In 
July 2008, after the program had been initiated, Kevin J. Powers, the 
Division Counsel for DE/VsChicago office, asked whether anyone in OCC had 
addressed whether the ^Bi subpoenas were in compliance with 21 U.S.C. 

§ 876. Donna Sanger, an OCC manager, forwarded this request to Senior 
Attorney 1 who, after reviewing a sample subpoena, told Sanger 2 months later 
that she had "no legal objections" without elaboration. Sanger then emailed 
Powers, stating: "Unless a federal court tells u s we can't do this, I think we can 
continue this project." However, as with a court review was unlikely 

because the subpoena recipient-companies agreed in advance to cooperate with 
the DEA, even if not paid, and had no real incentive to challenge the HH 
subpoenas. 

We found that this conclusor^mail exchange did not reflect a timely or 
adequate review of whether the subpoenas were issued in compliance with 
Section 876(a). The substantive deficiency in the 2008 legal review should have 
been particularlyapparen^iver^hesimilar issues raised to senior managers in 
OCC regarding BM^^^fllB^BliB 3 years earlier, as discussed above. 

The DEA finally recognized the need for a more rigorous review of the legal 
underpinnings for JHI after the OIG made inquiries about the program iii^ 
2013. In response to this inquiry, Senior Attorney 2 in OC^nalyzecHhe HB 
program, noting that the 2005 NDDS memorandum about was 

"directly on point" to analyze the use of "exploratory" administrative subpoenas 
in ■■-though no one else in the OCC apparently recognized this in 2008 . His 
review concluded that it was "unclear what a court would do with the BB 
subpoenas" because of conflicting court rulings, but thought they would be 
quashed if challenged in the Ninth Circuit Federal Court of Appeals pursuant to 
the Peters decision. Even without the benefit of the 2005 NDDS memorandum, 
the published judicial opinions discussed in the NDDS memorandum, including 
Bisceglia and Peters , existed long before |B began. Therefore, we believe 


131 The DEA maintains that the court ruling in Jabara resolved the issue of law 
enforcement's abilit^c^hare its data holdings without a warrant. This position assumes that the 
non-target-specific subpoenas used to amass the bulk data collection were consistent with 
Section 876(a) to fall under the Jabara principle that "evidence legally obtained" can be shared 
with other agencies. However, no court has so ruled. 
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that they should have factored into the 2008 legal review of whether the 
administrative subpoenas used for were appropriate. 

We determined that during part of 2013, data collected by means of|H 
subpoenas was utilized on an unknown number of occasions to create Fusion 
Center products in support of investigations having no connection to drug 
crimes. For example, the Fusion Center created four intelligence products for 
DHS ICE using ■■ data in support of investigations of alien smuggling, benefit 
fraud, trafficking in counterfeit merchandise, and firearms trafficking, as well as 
one intelligence product for the U.S. Secret Service relating to an investigation 
of false identification and alien registration cards. The UH-subpoenaed data 
apparently could be used without limitation to create intelligence products for 
Fusion Center member agencies in support of non-drug investigations once the 
Fusion Center obtained member-agency supplied data. 

As with the simila r use o f data, we believe that the lack of 
limitations on the use of H data raised substantial questions of law and 
policy that the DEA and the Department (and potentially even other participating 
Fusion Center agencies utilizing such data) should have analyzed carefully.***^ 
TheDEA^uthorit^^ollec^etailed purchaser data for all purchases of HHI 

was based on the potential relevance of such 
dat^cMJru^nvestigations under the DEA's jurisdiction based on the belief that 
(■■■■■ were frequently used in connection with Title 21 offenses. 
Routinely transferring the collection to the Fusion Center for exploitation by 
other agencies in non-drug cases was arguably tantamount to the DEA lending 
out its subpoena authority to agencies lacking their own. We found no DEA or 
Department memoranda assessing the legality of this use, which again due to 
the nature of the program was unlikely to be otherwise tested through litigation. 

As in our analysis of the program, we are not opining that a 
thorough legal analysis of these issues would have concluded that was 
inconsistent with Section 876(a) or that it could not be used in support of non¬ 
drug investigations. Rather , we note that the s ame se rious and readily apparent 
legal issues raised by were also raised by and that likewise no 

thorough analysis of such issues occurred before or during the operation of the 
initiative. 


C. 




132 As detailed in Chapter Four, the FBI decided not to participate in the use of data 
at the Fusion Center after FBI agents raised concerns regarding the broad scope of the non-target- 
specific H| subpoenas, which was not consistent with the FBI's policy requirement of a 
"predicated investigation" to issue administrative subpoenas. 
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E. Recommendations Regarding Legal Review 

1. Bulk Collections by Administrative Subpoena 

Although the HH and bulk collection programs no longer exist, 
there is nothing preventing the DEA or the Department from seeking to start 
such a program at any time in the future. In order to ensure that any future 
"bulk collection" program utilizing the DEA's administrative subpoena authority 
is grounded in clear written legal guidance sufficient to ensure that Department 
personnel act consistently with applicable laws and to provide meaningful 
standards for effective oversight, we make the following recommendation to the 
Office of the Deputy Attorney General and the DEA: 

Recommendation 1 : Establish a policy or directive sufficient 
to ensure that, if the DEAorthe Department considers 
reinstating a version of or or initiating another 

"bulk collection" program by use of administrative 
subpoenas, the DEA, in consultation with relevant DOJ 
components ( e.g. r the Criminal Division and the OLC), 
conducts a rigorous, objective legal analysis, memorialized 
in writing, in advance of reinstating or initiating such "bulk 
collection" program by use of administrative subpoenas. 

The policy or directive should ensure that any such legal 
analysis specifically addresses whether 21 U.S.C. § 876(a) 
authorizes the issuance of subpoenas of the type 
contemplated (i.e., non-targeted, for exploratory or target- 
development purposes), as well as the permissible 
conditions under which such bulk data collected by non- 
targeted administrative subpoenas may be shared with 
other federal agencies for non-drug purposes. 






II. OIG Assessment of Procedural Safeguards 

In this section we assess the procedural safeguards that the DEA 
currently employs to ensure compliance with the "relevance" requirement of 
Section 876(a), to prevent the misuse of bulk collections, and to ensure that the 
DEA administrative subpoenas are only issued in connection with Title 21 
investigations, among other things. 

A. Safeguards to Ensure Compliance with Section 876(a) and to 
Prevent Misuse of Collections 

Relevance and RAS in 

As detailed above, Section 876(a) requires that any information sought by 
an administrative subpoena be "relevant or material" to a Title 21 invest igation. 
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146 The scope of this review did not include assessment of the DEA's approval process for 
issuance of conventional administrative subpoenas. 

147 w e w j|| assess the sufficiency of these changes as part of following up on the 
recommendations in this report. 
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3. Recommendations Regarding Procedures for 

Establishing Relevance under Section 876(a) 

Bas ed on the foregoing analysis, we make the following recommendations 
regarding procedures for the purpose of ensuring compliance with 21 

U.S.C. § 876(a): 152 
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C. Safeguards Regarding Retention of Bulk Data 

The PEA collected by administra tive subpoena more than 

to develop potential investigative leads 
between 2008 and 2013. However, the DEA did not have a standardized 
practice for management of this bulk purchase data information. Although the 
DEA envisioned developing targeted investigative packages from the bulk 

data, in practice the DEA sent raw information directly to field divisions during 
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the majority of operation (or until mid-2013) for the field division's 

discretionary use. 155 

The DEA's protocols for management of the bulk data were 
particularly deficient with respect to storage and retention. We found that the 
DEA failed to establish any polices on storage orretention of the bulk data 
at any time before or during the operation ofH|. Indeed, FO had not even 
contemplated a retention schedule for the HTbulk data until the OIG raised 
this issue. 

_Although is not active, the DEA still retains the bulk collection of 

data. Besides the original subpoena returns on CDs, the DEA has no 
retention and disposition policy in place for the information regarding tens of 
thousands of purchases uploaded to servers in DARTS, elsewhere in the DEA, or 
the Fusion Center . 156 Nor has it purged any of this information since the 
initiation of Bjj|| in 2008. 

Under DEA policy, data uploaded to DARTS, including the bulk data, 
is currently retained indefinitely. In addition, data that the DEA obtained under 
a "general file" can be held 25 years after the cutoff date (which is 6 years after 
the last activity or correspondence). Therefore, under current DEA policy and 
practice, all non-case specific data stored by the DEA that was never 
connected to a specific investigation can likely be retained for at least 25 more 
years. 


We believe that such long-term or indefinite retention in government 
electroni^ystems raises significant privacy issues given that the vast majority 
of purchasers whose information was collected were never 

shown to be connected to illicit drug- related activities. In particular, FO's 
spreadsheet of cumulative results for for fiscal years 2008 through 2014 
showec^)nl^31 arrests from the tens of thousands of records of individual 
PHHHIH purchases. 157 We are therefore troubled that the DEA would be 


155 Before providing raw data to the field, FO failed to establish protocols t^ystematically 

review the incominJ^^Dull^at^n^nsui^hatM^as within th^cope of the HI 
subpoenas The first H| Staff 

erroneously assumed that the companies would not provide non-responsive data, and the second 
■1 Staff Coordinatoi^nl^creene^h^ull^at^^emovewhaUTe considered to be "dead- 
leads from the information sent 

tc^h^ieldJjowever^^howrUD^i^^rogram Analyst's periodic removal of HH 
IHBBBH HBMB HiiiBHiiBffiHBHBBW on her own initiative betweer^00^n^010^he 
DE^ailecMj^ystematically guard against retention and dissemination of 
as potential criminal leads. 

156 In June 2015, the DEA received approval from the National Archives and Records 
Administration to destroy the original subpoena returns on CDs (but not the other copies of the 
data in DEA files or systems) within 3 years after date of receipt. 

157 The DEA infonried the OIG that the cumulative data in the spreadsheet contains 
combined results for and another operational component unrelated to the use of 
administrative subpoenas, which cannotbe separately reported. Accordingly, the figure of 131 
arrests likely overstates the results of even if there also was under-reporting due to FO's 
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able to retain purchaser information unconnected to illicit activity in government 
electronic systems for such a long duration. 

By contrast with as discussed in Chapter Three, the DEA had 

established a plan for the accumulated bulk data in the Hit program whereby 
the data was retained in a secure off-site facility, only limited individuals within 
DEA had direct access, and the data was purged every 2 years. We do not 
conclude that the same requirements necessarily should have been applied to 
the bulk data, but rather that the DEA needs to put in place measures that 
are appropriate given the nature and scope of the information that it gathered 
through this program. 

Accordingly, we recommend the following: 

Recommendation 8 : The DEA should develop legally 
supportable criteria for retention of all |^Hl bulk data 
collected by use of admini strativ e subpoenas, and policies 
for the disposition of such bulk data. 


III. OIG Assessments and Recommendations Regarding Audits 



failure to establish standardized procedures to report results on a set schedule. Moreover, the 
DEA's statistics failed to account for targets or investigatton^jhat^ere already active and would 
have been pursued irrespective of any leads regarding purchase data. 
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IV. Parallel Construction 

In analyzing the use of "parallel construction" to protect the confidentiality 
of the bulk programs discussed in this report, we identified two issues that 
should not be conflated. The first is the question of whether it is permissible 
and appropriate to use parallel construction to generate evidence for use in 
court filings or other documents that otherwise might potentially reveal the 
program to the public. The second is whether parallel construction is being, or 
can permissibly be, used to prevent prosecutors from fully assessing their 
discovery and disclosure obligations in criminal cases under Rule 16 of the 
Federal Rules of Criminal Procedure or other authorities. 160 We believe that the 
first such use of parallel construction is a legitimate and appr opriate mean s of 
protecting the confidentiality of programs like and BHHHL 

However, we believe that the DEA (and other participating federal agencies) 
must take care to ensure that they comply with criminal discovery obligations, if 
any. 


There is nothing inherently inappropriate about using parallel construction 
tore-create informationoriginally derived from a confidential program like 

or for use as evidence in court filings, such as warrant 

applications, or even at trial. Agents are not required to disclose all evidence in 
their possession to support probable cause for a warrant, for example. Parallel 
construction is, in this regard, essentially just a process for obtaining the same 
evidence by other means^or example^n some cases, the communications 
links identified in or products can be "reconstructed" 

through a series of subpoenas to relevant carriers relyin^n the sam^actual 
predicate that was relied on to justify requesting a iMHIH ° r 
product in the first instance. The conventional administrative subpoena return 
may then be submitted as evidence, without any violation of program 
requirements or substantive or procedural rights. 

Evidence that has been reconstructed in this manner is obtained through 
alternative, but similar, legal process, and not inappropriate to use merely 
because the facts were previously known to the government by other legal 
means. This situation is essentially indistinguishable from the practice of using 
conventional investigative techniques to confirm a fact initially disclosed to a law 
enforcement agency in a confidential tip. 


160 Other authorities include Federal Rule of Criminal Procedure 26.2; 18 U.S.C. § 3500 
(the Jencks Act), Brady v. Maryland, 373 U.S. 83 (1963); and Giglio v. United States, 405 U.S. 
150 (1972). 
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However, the question of what must be disclosed to a defendant in 
discovery or under questioning by defense counsel is a separate issue from what 
may permissibly be relied on affirmatively in a court pleading. Dealing with 
discovery q uestions calling for the disclosure of sensitive programs like 
WOHi is, in this sense, similar to difficult questions of discovery that may 
occur when an investigation was initiated or relies on classified or confidential 
information, such as an informant whose identity the government does not want 
to reveal. 161 The question of whether and what the government will be required 
to disclose in discovery in such cases is governed by the Rules of Criminal 
Procedure (in particular, Rule 16) and by a body of case law, which may be 
complex and dependent upon the particular facts and jurisdiction. 162 

As in these situations, parallel construction does not supersede the 
government's discovery obligations, if any. The DEA has represented that it 
does not use parallel construction to prevent prosecutors from fully assessing 
their discovery and disclosure obligations in criminal cases. It was beyond the 
scope of this review to attempt to confirm this assertion^Nevertheless^r^ny 
case in which a confidential sensitive program like or 9HHHI is 

used to develop evidence in an investigation, there is a possibility that the 
government will be asked to disclose the source of information used to assist in 
the development of its investigation. Discovery obligations may lead back to the 
program eventually, depending on how much disclosure a court requires. This 
possibility exists even if the government never relies on any information 
developed from the program at trial or in a court filing. If complying with a 
discovery obligation would cause irreparable harm to a sensitive program, the 
government's options include seeking a protective order in sealed pleadings 
(likely on an ex parte basis), dismissing the particular counts that rely on the 
sensitive information, or in the most extreme circumstance dismissing the entire 
case—not ignoring discovery obligations. 


161 Indeed, Department guidance regarding discovery obligations of federal prosecutors 
has noted that "[p]rosecutors must always be mindful of security issues that may arise with 
respect to disclosures from confidential sources files." See David W. Ogden, Deputy Attorney 
General, memorandum for Department Prosecutors, Guidance for Prosecutors Regarding Criminal 
Discovery, January 4, 2010, at 5. Additionally, other Department guidance has noted that 
"litigating components should specifically state in their office-wide discovery policies that discovery 
in national security cases or cases involving classified information must account for special 
considerations that apply to those cases." See Gary G. Grindler, Acting Deputy Attorney General, 
memorandum for the Associate Attorney General and the Assistant Attorneys General for the 
Criminal Division, National Security Division, Civil Rights Division, Antitrust Division, Environment 
and Natural Resources Division, Tax Division, and all United States Attorneys, Policy and 
Procedures Regarding Discoverable Information in the Possession of the Intelligence Community or 
Military in Criminal Investigations, September 29, 2010, at 2-3. As one example, this guidance 
observed that: "disclosure of unclassified information relating to a national security investigation 
may also pose a risk to national security if, for instance, the information reveals investigative 
steps taken, investigative techniques or tradecraft used, or the identities of the witnesses 
interviewed during a national security investigation." Grindler, memorandum for the Associate 
Attorney General, etal., at 2 (italics in original). 

162 See, e.g., Grindler, memorandum for the Associate Attorney General, et al., at 3-4. 
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The DEA's training materials and other DEA documents provide that the 
main objective of the "parallel construction" process is to expeditiously provide 
actionable information to criminal investigators regarding existing investigative 
leads without unnecessarily risking disclosure of sensitive sources and methods. 
While they do not specifically address the issue, these materials do not instruct 
that parallel construction should be used to evade discovery. Rather, they focus 
on protecting disclosure of sensitive methods and tradecraft and state that the 
"ultimate sanction" for refusing to disclose the program is a motion to dismiss 
the case. 


However, these materials also c ontain som e troubling aspects. Most 
significantly, they expressly state that investigative products can 

b^hared with prosecutors. 163 The materials also expressly state that 
HHHH investigative products may not be referenced in any potentially 
discoverable information. 


The above guidance appears in tension with Department policy on a 
federal prosecutor's "duty to search" for discoverable information from all 
members of the "prosecution team," which typically includes federal law 
enforcement officers who participated in the investigation of the defendant. 164 
In this regard, Department policy notes that prosecutors should review and be 
granted access to the substantive case file and non-investigative files, such as 
confidential source files, that may contain discoverable information related to 
the matter being prosecuted. 165 However, if the DEA (or any other participating 
federal agency) as a member of the "prosecutorial team/^oes not routinely 
disclose to a federal prosecutor the existence of a investigative 

product that was subsequently parallel constructed, then the federal prosecutor 
who is ultimately responsible for compliance with discovery and disclosure 
obligations might not know of the existence of this information to assess if it is 
potentially discoverable, either initially or in response to questions that may 
arise during the course of litigation. 

We recognize that these are difficult issues and, therefor^^elieve that 
the issue of parallel construction of evidence developed via HHHI or 

requires a comprehensive review by those DOJ components with 
expertise in this area, including the Office of the Deputy Attorney General 
(Associate Deputy Attorney General & National Criminal Discovery Coordinator), 
the Criminal Division, and the DEA. 

In light of the above, we recommend: 



163 DEA guidance documents appear to suggest that the basis for this practice is because 
many prosecutorsdo not typically have security clearances to handle highly classified materials 
and some HI investigative products might be so classified. 

164 Ogden, memorandum for Department Prosecutors, at 2, 4; Grindler, memorandum for 
the Associate Attorney General, et al., at 3-8. 

165 Ogden, memorandum for Department Prosecutors, at 2, 4 
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Recommendation 13 : The Office of the Deputy Attorney 
General should ensure that a comprehensive review is 
conducted of the DEA's "paralle^onstruction'^jolicies and 
practices with respect to and HHBB 

investigative products to ensure that these policies and 
practices do not conflict with the government's discovery 
and disclosure obligations in criminal cases, or Department 
policy on this subject. 

Recommendation 14 : In the interim, and subject to the 
results of the above review, the Department's and the DEA's 
guidance and training material^egarding "parallel 
construction, / 'includingSOD/B | investigative 

products and investigative products, should be 

clarified to clearly state that "parallel construction" does not 
negate adherence to discovery and disclosure obligations in 
criminal cases, if applicable. These guidance and training 
materials should further make explicit that, if discovery 
requirements threaten disclosure of the program, 
prosecutors may seek to protect the program through 
appropriate process, such as protective orders or ex parte 
proceedings, and that, depending on the circumstances, the 
government may eventually be required to choose between 
disclosure or dismissal, but that "parallel construction" 
cannot be utilized as a substantive substitute for otherwise 
applicable discovery and disclosure requirements. 


V. General Updates to Policies and Training 


For the reasons discussed above, the OIG also makes the following 
additional recommendations with respect to updating policies and training: 


Recommendation 15 : The DEA should review and update its 
delegations to ensure that Section 876(a) authority has 
been properl^delegated to the officials who are reviewing 
and signing subpoenas. 


Recommendation 16 : The DEA should take steps to ensure 
that all changes to DEA policies, guidance, or procedures 
adopted as a result of implementing the foregoing 
recommendations are disseminated widely and readily 
available to DEA employees and other users of the 
programs, as appropriate. 


1)7 All such changes should be incorporated into 
the DEA Agents Manual and periodic training provided to 
users of the relevant programs and to SOD and NS 
personnel, as appropriate. 
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VI. Conclusion 

In this report, the OIG has described the DEA's use of its administrative 
subpoena authority under 21 U.S.C. § 876(a) to collect or exploit "bulk data" in 
the furtherance of narcotics investigations. We determ ined t hat t he PE A has 
discontinued two programs that utilized this authority (HH and but is 

utilizing an alternate approach under which bulk data collections are mai ntained 
and q ueried by priv ate entities on behalf of the DEA and other agencies (HHR 
| and HHHHI)- 

As detailed in this chapter, we found that the Department and DEA did 
not conduct an adequate review of the legal validity of theDEA's use of its 
administrative subpoena authority before initiating theJHH program. We 
found a similar failure by the DEA before initiating theJ^^Tpmgram, and that 
additional legal questions remain about its use ofthe program that 

require further legal assessment. Although the HHand^HTbulk collection 
programs were discontinued, there is no formal restriction barring the DEA (or 
the Department) from initiating similar programs at any time in the future. 
Therefore, we recommended that, if the DEA or the Department considers 
initiating a "bulk collection" program by use of administrative subpoenas, the 
Department should conduct a rigorous, objective legal analysis, memorialized in 
writing, in advance of initiating such a program that specifically addresses 
whether 21 U.S.C. § 876(a) authorizes the issuance of subpoenas of the type 
contemplated (/.e., non-targeted, for exploratory or target-development 
purposes), and addresses the permissible conditions under which such bulk data 
collected by non-targeted administrative subpoenas may be shared with other 
federal agencies for non-drug purposes. 

Additionally, we found that the DEA has failed to develop a final 
disposition plan for the |H1 bulk data that resides on DEA or Fusion Center 
servers and reco mmen ded that the DEA develop policies for retention and 
disposition of all HI bulk data collected by use of administrative subpoenas. 

We also fo und that the DEA's procedural safeguards and audit practices 
for the ^^^H program are not sufficiently clear or strong to ensure 
compliance with the requirement under Section 876(a) that the information 
being demanded is relevant or material to a Title 21 investigation, and therefore 
made a total of eight recommendations to address these issues. 



We also recommended that the Department undertake a comprehensive 
revie^jF'parallel construction" policies and practices with respect to HMMBJ 
and investigative products to ensure that these policies and 

practices do not conflict with the government's discovery and disclosure 
obligations in criminal cases, or Department policy on this subject, and that the 


125 






Department's and DEA's guidance and training materials on this subject be 
clarified as warranted. 

Finally, we recommended general updates to policies and training 
materials pertaining to the DEA's administrative subpoena authority. 

In total, the OIG made 16 recommendations to the DEA for improving its 
programs and ensuring compliance with its obligations under Section 876(a) and 
criminal discovery requirements. We believe that compliance with these 
recommendations will assist DEA and the Department to utilize its significant 
authorities in this area appropriately and consistently with the law and the civil 
rights and civil liberties of those who are protected thereby. 
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APPENDIX A 


January 1992 

June 1992 

1993 

August 1999 

2004-05 

March 2007 


TIMELINE OF KEY EVENTS 

The Attorney General approves the Program, an 

interagency program involving the analysis of bulk telephone 
call records to combat drug trafficking. As part of UOKMi 
the DEA begins using administrative subpoenas to collect 
bulk telephone calling data for calls from the United States to 
a foreign country known to have a nexus to drucMxafficking, 
or in some cases between those countries (the Hi 
collection). In subsequent years the number of countries 
vastly expands from the initial 1 country to many others. 

The DEA, FBI, Cri minal Divisio n, and Department of Defense 
enter into the first Memorandum of Understanding 

(MOU). In subsequent years other DOJ or federal agency 
components sign MOUs ancMDecjir^ontributing law 
enforceme nt data to the program and requesting 

HH99 analytical products prepared by the DEA. 

First subpoenas served on communications service 
providers. 

The DEA's Office of Chief Counsel (OCC) prepares a legal 
memorandum to "act as a counter" to legal concerns raised 
by t he FB I's General Counsel regarding the legal validity of 
the l^^ubpoenas (the first evidence of DEA legal analysis 
of the^lHcollection). The August 1999 Memorandum 
does not discuss court decisions regarding the use of 
"exploratory" subpoenas lacking a connection to a specific 
authorized investigation. 

2TeDEApropose^h^Js^^dministrativ^ubpoena^o^ 

BIM^BDOJCriminal Division attorneys question whether 
such sub poenas would b e legally valid, and note thatthe 
proposed subpoenas might place the 

programin legal or legislative jeopardy, thereb^jndemriining 
HUM The DEA abandons the proposalHjll^HHHi 
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June 2008 


August 2008 


September 2008 


August 2010 


March 2011 


January 2013 


June 2013 


The PEA commences the 

WKKMr under which the DEA uses its administrative 
su bpoena authority to collect bulk data regarding purchases 
of IB^HHfin order to develop targets for 
investigations. 



In response to an email from the DEA's Chica go Division 
Counsel requesting a legal review of an H| subpoena, an 
attorney in OCC states that she sees "no legal objection." 





Edward J. Snowden makes disclosures indicating that the 
National Security Agency has collected billions of telephone 
call records under Section 215 of the Foreign Intelligence 
Surveillance Act, encompassing every call made through the 
systems of certain telecommunications service providers 
where at least one end of the communication was located in 
the United States. 
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June 2013 

July 2013 

August 2013 

September 2013 
September 2013 

January 2014 
January 2014 


August 2014 


After the FBI's Office of General Counsel notes that FBI 
policy requires there to be a specific predicated investigation 
to issue an a dminis trative subpoena, the FBI declines to 
participate in at the Fusion Center. 

The DEA's OCC conducts another legal review of in 
preparation for an upcoming meetin^witl^h^OIG^nc^inds 
prior Criminal Division analysis on 
directly on point in assessing the issue. 

The Office of the Deput y Attor ney General (ODAG) directs 
the DEA to suspend the HHH collection and conduct a 
reassessment, based on public concerns arising from the 
Snowden lea ks and concerns about whether using subpoenas 
to amass the bulk collection is within the authority 
granted to the DEA under 21 U.S.C. § 876(a). 

The DEA ceases issuing subpoenas. 

The DEA completes its reassessment of the collection 
and requests that the Attorney General and the Deputy 
Attorney General authorize reinstatement of the WKL 
collection, attaching a legal analysis that again does not 
discuss court decisions casting doubt on the validity of the 
proposed use of the DEA's subpoena authority. 

ODAG requests that the Office of LegaKxJunsel (OLC) review 
the DEA's legal assessment of the WKM collection. 



^T^DE/Wriodifies its automatec^ystem for requesting 
fmHd products (including data) to incorporate 

a drop-down list of generic categories of information sources 
to show "reasonable articula[ble]," also known as "RAS." In 
addition, the requester is instructed to describe the 
"significance" of the target number in a free-text "Remarks" 
box. 
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August 2014 
September 2014 

July 2016 

Present 


The DEA withdr aws its request to reinstate and OLC 

review of ceases. 

The DEA prepares a draft guidance document for HflHI 
that has serv ed as the only written policy, protocol, or 
procedure for Among other things, the 

guidance statesthatBHBB users must demonstrate that 
"specific reasonable articula[ble] suspicion exists that [the 
target numbers] are being used in the conduct of criminal 
activities." 

The DEA first begins audits of the proqram(on a 

quarterly basis) including subpoena requests for)|BI 
data. 

and remain operational. and 

are non-operational. 
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Office of the Deputy Attorney General 


U.S. Department of Justice 


Associate Deputy Attorney General 


Washington. D C. 20530 


MEMORANDUM 


TO: 


Michael S. O'Neill 
Assistant Inspector General 
Oversight and Review P* 
Office of the Inspector 



FROM: Bradley Weinsheimer 


Associate Deputy Attorney General 
Office of the Deputy Attorney General 


DATE: March 22,2019 


SUBJECT: Response to OIG’s Draft Report “A Review of the Drug Enforcement 

Administration’s Use of Administrative Subpoenas To Collect or Exploit Bulk 
Data*’ 

The Office of the Deputy Attorney General (ODAG) appreciates the review undertaken 
by the Office of the Inspector General (OIG) and the opportunity to comment on the OIG’s final 
draft report, “A Review of the Drug Enforcement Administration's (DEA) Use of Administrative 
Subpoenas To Collect or Exploit Bulk Data." Recommendations One, Thirteen, and Fourteen of 
the report arc directed, in part, to ODAG. ODAG concurs with these recommendations and, 
working with the DEA. already has begun implementation of the recommendations. 

In particular, while the Department and DEA have no plans to reinstate any of the 
discontinued bulk collection programs discussed in the OIG report, ODAG will ensure that the 
Department establishes a policy or directive sufficient to ensure that, if the DEA or the 
Department considers another bulk collection using administrative subpoenas, the DEA. in 
consultation with relevant DOJ components (e.g., the Criminal Division and the OLC), will 
conduct a rigorous, objective legal analysis, memorialized in writing, in advance of initiating 
such a program. ODAG also will ensure that a comprehensive review is conducted of the DEA’s 
parallel construction policies and practices with respect to the programs covered in the OIG 
report to ensure that these policies and practices do not conflict with the government's criminal 
discovery obligations or Department policy on this subject. Finally, in the meantime. ODAG 
will work with the DEA to ensure its guidance and training materials regarding parallel 
construction, including investigative products relating to programs discussed in the OIG’s report. 
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will be clarified to clearly state that parallel construction does not negate adherence to discovery 
obligations, where applicable. 

ODAG and the DEA will provide to you a status update to report progress in meeting the 
recommendations contained in your report. 


2 

B-2 



APPENDIX C 



U. S. Department of Justice 

Drug Enforcement Administration 


www.dea.gov 


Washington. D.C. 20537 


m 1 9 2019 


MEMORANDUM 


TO: 


FROM: 


Mr. M. Scan O’Neill 
Assistant Inspector General 
Oversight and Review Division 
Office of the Inspector General 


Mary B. Schaefer - 
Chief Compliance Officer 
Office of Compliance 
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SUBJECT: DEA Response to the OIG's Law Enforcement Sensitive Formal Draft Report: 

“Drug Enforcement Administration's Use of Administrative Subpoenas to Collect 
or Exploit Bulk Data" 


The Drug Enforcement Administration (DEA) has reviewed the Law Enforcement Sensitive 
draft of the Department of Justice (DOJ) Office of the Inspector General’s (OIG) Oversight and 
Review' (O&R) Division report entitled, " Drug Enforcement Administration s Use of 
Administrative Subpoenas to Collect or Exploit Bulk Data." 

DEA appreciates the OIG's assessment of the programs involved in the report and the 
opportunity to discuss improvements made over the years to those programs that DEA 
participates in, operates, or oversees. The OIG has identified sixteen recommendations in the 
report that are directed towards DOJ and DEA. DEA concurs with the OIG's recommendations 
for further improvement of its use of administrative subpoenas with respect to bulk data. 
Implementation is already underway; DEA will provide the OIG with a memorandum detailing its 
efforts under separate cover. 

Thank you for the opportunity to review the OIG’s report. We look forward to working with 
you and your staff to improve our processes. 

If there are any questions regarding this response, please contact the DEA's Audit Liaison 
Section on 202-307-8200. 
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The Department of Justice Office of the Inspector General (DOJ OIG) is a 
statutorily created independent entity whose mission is to detect and deter 
waste, fraud, abuse, and misconduct in the Department of Justice, and to 
promote economy and efficiency in the Department's operations. 

To report allegations of waste, fraud, abuse, or misconduct regarding DOJ 
programs, employees, contractors, grants, or contracts please visit or call the 
DOJ OIG Hotline at oiq.iustice.gov/hotline or (800) 869-4499. 
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